Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2003-0770
FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement.
Affected Products: n/a
References: [{'name': '20030917 Exploit: IkonBoard 3.1.1/3.1.2a arbitrary command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106381136115972&w=2'}, {'name': '20030908 IkonBoard 3.1.2a arbitrary command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/336598'}, {'name': '20030401 IkonBoard v3.1.1: arbitrary command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/317234'}]
CVE State: PUBLISHED
Explain CVE-2003-0771
Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does.
Affected Products: n/a
References: [{'name': '20030907 Apache::Gallery local webserver compromise, privilege escalation', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106304236914921&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0772
Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments.
Affected Products: n/a
References: [{'name': '20030906 Remote and Local Vulnerabilities In WS_FTP Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106288825902868&w=2'}, {'name': '8542', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8542'}, {'name': 'VU#219140', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/219140'}, {'name': 'VU#792284', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/792284'}, {'name': 'wsftp-ftp-command-bo(13119)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13119'}, {'name': '9671', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/9671'}]
CVE State: PUBLISHED
Explain CVE-2003-0773
saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf.
Affected Products: n/a
References: [{'name': 'RHSA-2003:278', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-278.html'}, {'name': 'CSSA-2004-005.0', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt'}, {'name': 'SuSE-SA:2003:046', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_046_sane.html'}, {'name': '8595', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8595'}, {'name': 'RHSA-2003:285', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-285.html'}, {'name': '8593', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8593'}, {'name': 'DSA-379', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-379'}, {'name': 'MDKSA-2003:099', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:099'}]
CVE State: PUBLISHED
Explain CVE-2003-0774
saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service (segmentation fault) when invalid memory is accessed.
Affected Products: n/a
References: [{'name': 'RHSA-2003:278', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-278.html'}, {'name': 'CSSA-2004-005.0', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt'}, {'name': 'SuSE-SA:2003:046', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_046_sane.html'}, {'name': 'RHSA-2003:285', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-285.html'}, {'name': '8593', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8593'}, {'name': 'DSA-379', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-379'}, {'name': 'MDKSA-2003:099', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:099'}]
CVE State: PUBLISHED
Explain CVE-2003-0775
saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service (memory consumption or crash).
Affected Products: n/a
References: [{'name': 'RHSA-2003:278', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-278.html'}, {'name': 'CSSA-2004-005.0', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt'}, {'name': 'SuSE-SA:2003:046', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_046_sane.html'}, {'name': '8600', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8600'}, {'name': 'RHSA-2003:285', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-285.html'}, {'name': '8593', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8593'}, {'name': 'DSA-379', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-379'}, {'name': 'MDKSA-2003:099', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:099'}]
CVE State: PUBLISHED
Explain CVE-2003-0776
saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.
Affected Products: n/a
References: [{'name': 'RHSA-2003:278', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-278.html'}, {'name': 'CSSA-2004-005.0', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt'}, {'name': 'SuSE-SA:2003:046', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_046_sane.html'}, {'name': 'RHSA-2003:285', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-285.html'}, {'name': '8593', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8593'}, {'name': 'DSA-379', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-379'}, {'name': 'MDKSA-2003:099', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:099'}]
CVE State: PUBLISHED
Explain CVE-2003-0777
saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service (segmentation fault).
Affected Products: n/a
References: [{'name': '8597', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8597'}, {'name': 'RHSA-2003:278', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-278.html'}, {'name': 'CSSA-2004-005.0', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt'}, {'name': 'SuSE-SA:2003:046', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_046_sane.html'}, {'name': 'RHSA-2003:285', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-285.html'}, {'name': '8593', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8593'}, {'name': 'DSA-379', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-379'}, {'name': 'MDKSA-2003:099', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:099'}]
CVE State: PUBLISHED
Explain CVE-2003-0778
saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow attackers to cause a denial of service (memory consumption).
Affected Products: n/a
References: [{'name': 'RHSA-2003:278', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-278.html'}, {'name': 'CSSA-2004-005.0', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt'}, {'name': 'SuSE-SA:2003:046', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_046_sane.html'}, {'name': 'RHSA-2003:285', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-285.html'}, {'name': '8593', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8593'}, {'name': '8596', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8596'}, {'name': 'DSA-379', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-379'}, {'name': 'MDKSA-2003:099', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:099'}]
CVE State: PUBLISHED
Explain CVE-2003-0779
SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string.
Affected Products: n/a
References: [{'name': 'A091103-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a091103-1.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0780
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.
Affected Products: n/a
References: [{'name': 'CLA-2003:743', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000743'}, {'name': 'RHSA-2003:282', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-282.html'}, {'name': 'MDKSA-2003:094', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:094'}, {'name': '20030913 exploit for mysql -- [get_salt_from_password] problem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106364207129993&w=2'}, {'name': '20030910 Buffer overflow in MySQL', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009819.html'}, {'name': 'DSA-381', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-381'}, {'name': 'VU#516492', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/516492'}, {'name': 'RHSA-2003:281', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-281.html'}, {'name': '20030910 Buffer overflow in MySQL', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/337012'}, {'name': '9709', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/9709'}, {'name': '2003-0034', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://marc.info/?l=bugtraq&m=106381424420775&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0781
Unknown vulnerability in ecartis before 1.0.0 does not properly validate user input, which allows attackers to obtain mailing list passwords.
Affected Products: n/a
References: [{'name': 'DSA-467', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-467'}, {'name': 'ecartis-subscribe-password-disclosure(12929)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12929'}]
CVE State: PUBLISHED
Explain CVE-2003-0782
Multiple buffer overflows in ecartis before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.
Affected Products: n/a
References: [{'name': 'DSA-467', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-467'}, {'name': 'ecartis-multiple-bo(12928)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12928'}]
CVE State: PUBLISHED
Explain CVE-2003-0783
Multiple buffer overflows in hztty 2.0 allow local users to gain root privileges.
Affected Products: n/a
References: [{'name': '1007757', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1007757'}, {'name': '1007756', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1007756'}, {'name': '8656', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8656'}, {'name': 'hztty-bo(13243)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13243'}, {'name': '7119', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7119'}, {'name': '9792', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/9792'}, {'name': 'DSA-385', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-385'}, {'name': '20030921 Fw: 0x333hztty => hztty 2.0 local root exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106424495804417&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0784
Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that contains format string specifiers.
Affected Products: n/a
References: [{'name': 'IY47764', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY47764&apar=only'}]
CVE State: PUBLISHED
Explain CVE-2003-0785
ipmasq before 3.5.12, in certain configurations, may forward packets to the external interface even if the packets are not associated with an established connection, which could allow remote attackers to bypass intended filtering.
Affected Products: n/a
References: [{'name': 'DSA-389', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-389'}]
CVE State: PUBLISHED
Explain CVE-2003-0786
The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openssh.com/txt/sshpam.adv'}, {'name': '8677', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8677'}, {'name': '20030923 Multiple PAM vulnerabilities in portable OpenSSH', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/338617'}, {'name': '20030923 Portable OpenSSH 3.7.1p2 released', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/338616'}, {'name': '20030924 [OpenPKG-SA-2003.042] OpenPKG Security Advisory (openssh)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010812.html'}, {'name': 'VU#602204', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/602204'}]
CVE State: PUBLISHED
Explain CVE-2003-0787
The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openssh.com/txt/sshpam.adv'}, {'name': '8677', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8677'}, {'name': 'VU#209807', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/209807'}, {'name': '20030923 Multiple PAM vulnerabilities in portable OpenSSH', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/338617'}, {'name': '20030923 Portable OpenSSH 3.7.1p2 released', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/338616'}, {'name': '20030924 [OpenPKG-SA-2003.042] OpenPKG Security Advisory (openssh)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010812.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0788
Unknown vulnerability in the Internet Printing Protocol (IPP) implementation in CUPS before 1.1.19 allows remote attackers to cause a denial of service (CPU consumption from a "busy loop") via certain inputs to the IPP port (TCP 631).
Affected Products: n/a
References: [{'name': '8952', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8952'}, {'name': 'CLA-2003:788', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000788'}, {'name': 'TLSA-2003-63', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/security/TLSA-2003-63.txt'}, {'name': 'RHSA-2003:275', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-275.html'}, {'name': 'MDKSA-2003:104', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:104'}, {'name': '10123', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10123'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=97958'}, {'name': 'CLA-2003:779', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000779'}, {'name': 'cups-ipp-dos(13584)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13584'}]
CVE State: PUBLISHED
Explain CVE-2003-0791
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.
Affected Products: n/a
References: [{'name': 'MDKSA-2004:021', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:021'}, {'name': '8390', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8390'}, {'name': '11103', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11103/'}, {'name': '9322', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9322'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=221526'}, {'name': 'SCOSA-2004.8', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'http://www.securityfocus.com/advisories/6979'}]
CVE State: PUBLISHED
Explain CVE-2003-0792
Fetchmail 6.2.4 and earlier does not properly allocate memory for long lines, which allows remote attackers to cause a denial of service (crash) via a certain email.
Affected Products: n/a
References: [{'name': 'CSSA-2004-004.0', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-004.0/CSSA-2004-004.0.txt'}, {'name': 'fetchmail-email-dos(13450)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13450'}, {'name': 'IMNX-2003-7+-023-01', 'tags': ['vendor-advisory', 'x_refsource_IMMUNIX'], 'url': 'http://www.securityfocus.com/advisories/5987'}, {'name': '8843', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8843'}, {'name': 'MDKSA-2003:101', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:101'}, {'name': 'GLSA-200403-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200403-10.xml'}, {'name': 'TLSA-2003-61', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/security/TLSA-2003-61.txt'}, {'name': '20040220 LNSA-#2004-0002: Fetchmail 6.2.4 and earlier remote denial of service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107731542827401&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0793
GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not restrict the size of input, which allows attackers to cause a denial of service (memory consumption).
Affected Products: n/a
References: [{'name': 'MDKSA-2003:100', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:100'}, {'name': 'gdm-dos(13447)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13447'}, {'name': 'CLA-2003:766', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000766'}, {'name': '8846', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8846'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.gnome.org/bonsai/cvsblame.cgi?file=gdm2/NEWS&rev=&root=/cvs/gnome'}]
CVE State: PUBLISHED
Explain CVE-2003-0794
GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not limit the number or duration of commands and uses a blocking socket connection, which allows attackers to cause a denial of service (resource exhaustion) by sending commands and not reading the results.
Affected Products: n/a
References: [{'name': 'gdm-command-dos(13448)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13448'}, {'name': 'MDKSA-2003:100', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:100'}, {'name': 'CLA-2003:766', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000766'}, {'name': '8846', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8846'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.gnome.org/bonsai/cvsblame.cgi?file=gdm2/NEWS&rev=&root=/cvs/gnome'}]
CVE State: PUBLISHED
Explain CVE-2003-0795
The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) via a malformed telnet command to the telnet CLI port, which may trigger a null dereference.
Affected Products: n/a
References: [{'name': 'RHSA-2003:305', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-305.html'}, {'name': '20031114 Quagga remote vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106883387304266&w=2'}, {'name': 'DSA-415', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-415'}, {'name': '10563', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10563'}, {'name': 'RHSA-2003:307', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-307.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0796
Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through 6.5.22 allows remote attackers to mount from unprivileged ports even with the -n option disabled.
Affected Products: n/a
References: [{'name': '20031102-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20031102-01-P.asc'}, {'name': '20031102-02-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20031102-02-P.asc'}, {'name': 'rpcmountd-mount-gain-access(13807)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13807'}, {'name': '9085', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9085'}]
CVE State: PUBLISHED
Explain CVE-2003-0797
Unknown vulnerability in rpc.mountd in SGI IRIX 6.5 through 6.5.22 allows remote attackers to cause a denial of service (process death) via unknown attack vectors.
Affected Products: n/a
References: [{'name': '9084', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9084'}, {'name': '20031102-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20031102-01-P.asc'}, {'name': '20031102-02-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20031102-02-P.asc'}, {'name': '8520', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8520'}, {'name': 'rpcmountd-dos(13808)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13808'}]
CVE State: PUBLISHED
Explain CVE-2003-0801
Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute arbitrary web script and steal cookies via a URL to the docs/ directory that contains the script.
Affected Products: n/a
References: [{'name': 'A091503-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a091503-1.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0802
Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root, and the physical path of the NED server, via a "retrieve" action with a location parameter of . (dot).
Affected Products: n/a
References: [{'name': 'A091503-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a091503-1.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0803
Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user.
Affected Products: n/a
References: [{'name': 'A091503-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a091503-1.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0804
The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests.
Affected Products: n/a
References: [{'name': '20040502-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040502-01-P.asc'}, {'name': 'FreeBSD-SA-03:14', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:14.arp.asc'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=61798'}]
CVE State: PUBLISHED
Explain CVE-2003-0805
Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command, and (2) the GSisText function, which calculates the view-type.
Affected Products: n/a
References: [{'name': '20030712 UMN gopherd[2.x.x/3.x.x]: ftp gateway, and GSisText() buffer', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105804485302211&w=2'}, {'name': '20030818 FW: [gopher] UMN Gopher 3.0.6 released', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106123498310717&w=2'}, {'name': 'DSA-387', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-387'}]
CVE State: PUBLISHED
Explain CVE-2003-0806
Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of a domain, allows remote attackers to execute arbitrary code.
Affected Products: n/a
References: [{'name': 'O-114', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-114.shtml'}, {'name': '10126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10126'}, {'name': 'oval:org.mitre.oval:def:1054', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1054'}, {'name': 'MS04-011', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011'}, {'name': 'win-winlogon-bo(15702)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15702'}, {'name': 'oval:org.mitre.oval:def:896', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A896'}, {'name': 'TA04-104A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-104A.html'}, {'name': 'oval:org.mitre.oval:def:895', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A895'}, {'name': 'VU#471260', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/471260'}]
CVE State: PUBLISHED
Explain CVE-2003-0807
Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request.
Affected Products: n/a
References: [{'name': 'VU#698564', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/698564'}, {'name': 'oval:org.mitre.oval:def:1030', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1030'}, {'name': 'O-115', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-115.shtml'}, {'name': '1009762', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/alerts/2004/Apr/1009762.html'}, {'name': '10123', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10123'}, {'name': 'win-cis-rpc-http-dos(15709)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15709'}, {'name': 'TA04-104A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-104A.html'}, {'name': 'MS04-012', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012'}, {'name': 'oval:org.mitre.oval:def:969', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A969'}, {'name': 'oval:org.mitre.oval:def:995', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A995'}]
CVE State: PUBLISHED
Explain CVE-2003-0809
Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows remote attackers to execute arbitrary code via an HTML e-mail message or web page.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:123', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A123'}, {'name': '8565', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8565'}, {'name': 'ie-xmlobject-code-execution(13300)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13300'}, {'name': 'MS03-040', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-040'}, {'name': '7887', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7887'}]
CVE State: PUBLISHED
Explain CVE-2003-0812
Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API.
Affected Products: n/a
References: [{'name': '20040129 Buffer Overrun in Microsoft Windows 2000 Workstation Service (MS03-049)', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040129-ms03-049.shtml'}, {'name': 'MS03-049', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-049'}, {'name': '9011', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9011'}, {'name': '20031111 EEYE: Windows Workstation Service Remote Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106859247713009&w=2'}, {'name': 'VU#567620', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/567620'}, {'name': '20031112 Proof of concept for Windows Workstation Service overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106865197102041&w=2'}, {'name': 'oval:org.mitre.oval:def:331', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A331'}, {'name': 'CA-2003-28', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2003-28.html'}, {'name': 'oval:org.mitre.oval:def:575', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A575'}]
CVE State: PUBLISHED
Explain CVE-2003-0813
A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.
Affected Products: n/a
References: [{'name': '20031010 Re : [VERY] BAD news on RPC DCOM Exploit', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011870.html'}, {'name': '20031010 Bad news on RPC DCOM vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106579825211708&w=2'}, {'name': '20031011 Bad news on RPC DCOM2 vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011901.html'}, {'name': 'VU#547820', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/547820'}, {'name': 'oval:org.mitre.oval:def:894', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A894'}, {'name': '20031011 RE: Bad news on RPC DCOM vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106588827513795&w=2'}, {'name': 'TA04-104A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-104A.html'}, {'name': 'MS04-012', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012'}, {'name': '20031010 Bad news on RPC DCOM vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=106580303918155&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securitylab.ru/_exploits/rpc2.c.txt'}, {'name': '20031014 Microsoft RPC Race Condition Denial of Service', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/xforce/alerts/id/155'}, {'name': '8811', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8811'}, {'name': '20031010 Re: Bad news on RPC DCOM vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011886.html'}, {'name': 'oval:org.mitre.oval:def:900', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A900'}, {'name': 'oval:org.mitre.oval:def:893', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A893'}]
CVE State: PUBLISHED
Explain CVE-2003-0814
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.safecenter.net/liudieyu/BodyRefreshLoadsJPU/BodyRefreshLoadsJPU-Content.htm'}, {'name': 'oval:org.mitre.oval:def:335', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A335'}, {'name': 'oval:org.mitre.oval:def:342', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A342'}, {'name': 'MS03-048', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048'}, {'name': '1007687', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1007687'}, {'name': 'oval:org.mitre.oval:def:392', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A392'}, {'name': 'oval:org.mitre.oval:def:341', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A341'}, {'name': "20030911 LiuDieYu's missing files are here.", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/337086'}, {'name': 'oval:org.mitre.oval:def:344', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A344'}, {'name': 'oval:org.mitre.oval:def:349', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A349'}, {'name': 'oval:org.mitre.oval:def:343', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A343'}, {'name': '20030910 MSIE->BodyRefreshLoadsJPU:refresh is a new navigation method', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0177.html'}, {'name': 'VU#326412', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/326412'}, {'name': '10192', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10192'}]
CVE State: PUBLISHED
Explain CVE-2003-0817
Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:508', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A508'}, {'name': 'oval:org.mitre.oval:def:543', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A543'}, {'name': 'oval:org.mitre.oval:def:548', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A548'}, {'name': 'oval:org.mitre.oval:def:520', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A520'}, {'name': 'MS03-048', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048'}, {'name': 'oval:org.mitre.oval:def:556', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A556'}, {'name': '9012', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9012'}, {'name': 'oval:org.mitre.oval:def:549', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A549'}, {'name': 'oval:org.mitre.oval:def:566', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A566'}, {'name': '10192', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10192'}]
CVE State: PUBLISHED
Explain CVE-2003-0818
Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.
Affected Products: n/a
References: [{'name': 'VU#583108', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/583108'}, {'name': 'TA04-041A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-041A.html'}, {'name': 'oval:org.mitre.oval:def:653', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A653'}, {'name': '20040210 EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107643836125615&w=2'}, {'name': '20040210 EEYE: Microsoft ASN.1 Library Bit String Heap Corruption', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107643892224825&w=2'}, {'name': 'oval:org.mitre.oval:def:799', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A799'}, {'name': 'oval:org.mitre.oval:def:796', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A796'}, {'name': 'VU#216324', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/216324'}, {'name': 'MS04-007', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-007'}, {'name': '20040210 EEYE: Microsoft ASN.1 Library Bit String Heap Corruption', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=107650972723080&w=2'}, {'name': '20040210 EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=107650972617367&w=2'}, {'name': 'oval:org.mitre.oval:def:797', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A797'}]
CVE State: PUBLISHED
Explain CVE-2003-0819
Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:478', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A478'}, {'name': '9406', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9406'}, {'name': 'MS04-001', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-001'}, {'name': '10611', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10611'}, {'name': 'VU#749342', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/749342'}, {'name': '1008698', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1008698'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.uniras.gov.uk/vuls/2004/006489/h323.htm'}, {'name': 'CA-2004-01', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2004-01.html'}, {'name': '9408', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9408'}]
CVE State: PUBLISHED