Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2003-1426
Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPT_FILENAME environment variable to Perl's @INC include array, which allows local users to execute arbitrary code by modifying SCRIPT_FILENAME to reference a directory containing a malicious openwebmail-shared.pl executable.
Affected Products: n/a
References: [{'name': '6885', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6885'}, {'name': '20030218 Cpanel 5 and below remote command execution and local root vulnerabilities', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0087.html'}, {'name': 'cpanel-scriptfilename-gain-privileges(11357)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11357'}]
CVE State: PUBLISHED
Explain CVE-2003-1427
Directory traversal vulnerability in the web configuration interface in Netgear FM114P 1.4 allows remote attackers to read arbitrary files, such as the netgear.cfg configuration file, via a hex-encoded (%2e%2e%2f) ../ (dot dot slash) in the port parameter.
Affected Products: n/a
References: [{'name': '6807', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6807'}, {'name': '20030209 Bug in Netgear FM114P Wireless Router firmware', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/311160'}, {'name': 'netgear-fm114p-directory-traversal(11279)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11279'}]
CVE State: PUBLISHED
Explain CVE-2003-1428
Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos.
Affected Products: n/a
References: [{'name': '6809', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6809'}, {'name': '20030210 Gallery 1.3.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/311161'}, {'name': 'gallery-album-insecure-directory(11284)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11284'}]
CVE State: PUBLISHED
Explain CVE-2003-1429
Buffer overflow in Proxomitron Naoko 4.4 allows remote attackers to execute arbitrary code via a long request.
Affected Products: n/a
References: [{'name': 'proxomitron-parameter-length-bo(11364)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11364'}, {'name': '20030219 [SCSA-005] Proxomitron Naoko Long Path Buffer Overflow/DoS', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0088.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1430
Directory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote attackers to access known files via a ".." (dot dot) in an unreal:// URL.
Affected Products: n/a
References: [{'name': '6775', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6775'}, {'name': '20030205 Unreal engine: results of my research', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html'}, {'name': '20030211 Re: Epic Games threatens to sue security researchers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html'}, {'name': 'ut-file-directory-traversal(11299)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11299'}]
CVE State: PUBLISHED
Explain CVE-2003-1431
Buffer overflow in Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (crash) via a long host string in the Unreal URL.
Affected Products: n/a
References: [{'name': 'ut-url-memory-corruption(11301)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11301'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.pivx.com/luigi/adv/ueng-adv.txt'}, {'name': '20030205 Unreal engine: results of my research', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html'}, {'name': '20030211 Re: Epic Games threatens to sue security researchers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html'}, {'name': '6774', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6774'}]
CVE State: PUBLISHED
Explain CVE-2003-1432
Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with a negative size value, which is treated as a large positive number during memory allocation, or (2) a negative size value in a package file.
Affected Products: n/a
References: [{'name': 'ut-packet-dos(11302)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11302'}, {'name': 'ut-negative-memory-corruption(11305)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11305'}, {'name': '6770', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6770'}, {'name': '6772', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6772'}, {'name': '20030205 Unreal engine: results of my research', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html'}, {'name': '20030211 Re: Epic Games threatens to sue security researchers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html'}, {'name': 'ut-negative-udp-dos(12012)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12012'}, {'name': '20030513 UT2003 client passive DoS exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-05/0142.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1433
Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game multiple times.
Affected Products: n/a
References: [{'name': '6771', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6771'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.pivx.com/luigi/adv/ueng-adv.txt'}, {'name': 'ut-join-request-dos(11304)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11304'}, {'name': '20030205 Unreal engine: results of my research', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html'}, {'name': '20030211 Re: Epic Games threatens to sue security researchers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1434
login_ldap 3.1 and 3.2 allows remote attackers to initiate unauthenticated bind requests if (1) bind_anon_dn is on, which allows a bind with no password provided, (2) bind_anon_cred is on, which allows a bind with no DN, or (3) bind_anon is on, which allows a bind with no DN or password.
Affected Products: n/a
References: [{'name': '6903', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6903'}, {'name': '20030220 login_ldap security announcement', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0244.html'}, {'name': 'loginldap-password-bypass(11374)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11374'}]
CVE State: PUBLISHED
Explain CVE-2003-1435
SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary SQL commands via the days parameter to the search module.
Affected Products: n/a
References: [{'name': '6887', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6887'}, {'name': '20030220 PHPNuke SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0246.html'}, {'name': 'phpnuke-search-sql-injection(11375)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11375'}]
CVE State: PUBLISHED
Explain CVE-2003-1436
PHP remote file inclusion vulnerability in nukebrowser.php in Nukebrowser 2.1 to 2.5 allows remote attackers to execute arbitrary PHP code via the filhead parameter.
Affected Products: n/a
References: [{'name': '1006031', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1006031'}, {'name': '6731', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6731'}, {'name': '7986', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7986'}, {'name': 'nukebrowser-php-file-include(11217)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11217'}]
CVE State: PUBLISHED
Explain CVE-2003-1437
BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access.
Affected Products: n/a
References: [{'name': 'BEA03-25.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-25.jsp'}, {'name': '6719', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6719'}, {'name': 'weblogic-keystore-plaintext-passwords(11220)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11220'}]
CVE State: PUBLISHED
Explain CVE-2003-1438
Race condition in BEA WebLogic Server and Express 5.1 through 7.0.0.1, when using in-memory session replication or replicated stateful session beans, causes the same buffer to be provided to two users, which could allow one user to see session data that was intended for another user.
Affected Products: n/a
References: [{'name': 'BEA03-26.01', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-26.01.jsp'}, {'name': '1006018', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006018'}, {'name': '6717', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6717'}, {'name': 'weblogic-clustered-race-condition(11221)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11221'}]
CVE State: PUBLISHED
Explain CVE-2003-1439
Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.
Affected Products: n/a
References: [{'name': 'silc-plaintext-account-information(11244)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11244'}, {'name': '20030201 Re: silc question - insecure memory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/309941/30/26090/threaded'}, {'name': '6743', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6743'}, {'name': '20030201 silc question - insecure memory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/309775'}]
CVE State: PUBLISHED
Explain CVE-2003-1440
SpamProbe 0.8a allows remote attackers to cause a denial of service (crash) via HTML e-mail with newline characters within an href tag, which is not properly handled by certain regular expressions.
Affected Products: n/a
References: [{'name': '6739', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6739'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=137128'}, {'name': '7994', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7994'}, {'name': 'spamprobe-newlines-href-dos(11247)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11247'}, {'name': '1006038', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006038'}]
CVE State: PUBLISHED
Explain CVE-2003-1441
Posadis 0.50.4 through 0.50.8 allows remote attackers to cause a denial of service (crash) via a DNS message without a question section, which triggers null dereference.
Affected Products: n/a
References: [{'name': 'posadis-dns-packet-dos(11285)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11285'}, {'name': '8018', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8018'}, {'name': '6799', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6799'}, {'name': '3522', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3522'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.posadis.org/advisories/pos_adv_003.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-1442
The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side.
Affected Products: n/a
References: [{'name': 'ericsson-hm220dp-auth-bypass(11290)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11290'}, {'name': '20030225 RE: Ericsson HM220dp ADSL modem Insecure Web Administration Vulne', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104619331706574&w=2'}, {'name': '20030211 Ericsson HM220dp ADSL modem Insecure Web Administration Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0127.html'}, {'name': '6824', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6824'}]
CVE State: PUBLISHED
Explain CVE-2003-1443
Kaspersky Antivirus (KAV) 4.0.9.0 does not detect viruses in files with MS-DOS device names in their filenames, which allows local users to bypass virus protection, as demonstrated using aux.vbs and aux.com.
Affected Products: n/a
References: [{'name': 'kav-device-name-bypass(11292)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11292'}, {'name': '20030211 SECURITY.NNOV: Kaspersky Antivirus DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0130.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1444
Kaspersky Antivirus (KAV) 4.0.9.0 allows local users to cause a denial of service (CPU consumption or crash) and prevent malicious code from being detected via a file with a long pathname.
Affected Products: n/a
References: [{'name': '20030211 SECURITY.NNOV: Kaspersky Antivirus DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0130.html'}, {'name': 'kav-long-path-dos(11291)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11291'}]
CVE State: PUBLISHED
Explain CVE-2003-1445
Stack-based buffer overflow in Far Manager 1.70beta1 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long pathname.
Affected Products: n/a
References: [{'name': 'far-long-path-bo(11293)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11293'}, {'name': '3281', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3281'}, {'name': '6822', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6822'}, {'name': '20030211 SECURITY.NNOV: Far buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/311334'}]
CVE State: PUBLISHED
Explain CVE-2003-1446
Buffer overflow in the save_into_file function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a ~ (tilde).
Affected Products: n/a
References: [{'name': '6912', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6912'}, {'name': '20030221 Rogue buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0260.html'}, {'name': 'rogue-saveintofile-bo(11382)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11382'}]
CVE State: PUBLISHED
Explain CVE-2003-1447
IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt passwords when the configuration file is exported to XML.
Affected Products: n/a
References: [{'name': 'websphere-xml-weak-encryption(11245)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11245'}, {'name': '20030206 Re: Weak password protection in WebSphere 4.0.4 XML configuration export', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/310796'}, {'name': '6758', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6758'}, {'name': '20030204 Weak password protection in WebSphere 4.0.4 XML configuration export', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/310118'}, {'name': '3277', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3277'}]
CVE State: PUBLISHED
Explain CVE-2003-1448
Memory leak in the Windows 2000 kernel allows remote attackers to cause a denial of service (SMB request hang) via a NetBIOS continuation packet.
Affected Products: n/a
References: [{'name': 'win2k-netbios-continuation-dos(11274)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11274'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.immunitysec.com/downloads/advantages_of_block_based_analysis.html'}, {'name': '6766', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6766'}]
CVE State: PUBLISHED
Explain CVE-2003-1449
Aladdin Knowlege Systems eSafe Gateway 3.5.126.0 does not check the entire stream of Content Vectoring Protocol (CVP) data, which allows remote attackers to bypass virus protection.
Affected Products: n/a
References: [{'name': '20030206 FW-1 NG FP3 Bug - Data flow problem when transferring large files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-02/0088.html'}, {'name': 'esafe-gateway-filter-bypass(11295)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11295'}, {'name': '6787', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6787'}]
CVE State: PUBLISHED
Explain CVE-2003-1450
BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service (segmentation fault) via a malformed RPL_NAMREPLY numeric 353 message.
Affected Products: n/a
References: [{'name': '20030217 [argv] BitchX-353 Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/312133'}, {'name': '6880', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6880'}, {'name': '20030217 [argv] BitchX-353 Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-February/003850.html'}, {'name': 'bitchx-irc-namreply-dos(11363)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11363'}, {'name': '3279', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3279'}, {'name': '200302-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.linuxsecurity.com/content/view/104622/104/'}]
CVE State: PUBLISHED
Explain CVE-2003-1451
Buffer overflow in Symantec Norton AntiVirus 2002 allows remote attackers to execute arbitrary code via an e-mail attachment with a compressed ZIP file that contains a file with a long filename.
Affected Products: n/a
References: [{'name': 'nav-email-filename-bo(11365)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11365'}, {'name': '6886', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6886'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.lac.co.jp/security/english/snsadv_e/61_e.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2003.02.28.html'}, {'name': '20030219 [SNS Advisory No.61] Symantec Norton AntiVirus 2002 Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-02/0233.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1452
Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd program.
Affected Products: n/a
References: [{'name': '3268', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3268'}, {'name': '20030429 [INetCop Security Advisory] Qpopper v4.0.x poppassd local root', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0047.html'}, {'name': '20030428 Qpopper v4.0.x poppassd local root exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/319811'}, {'name': 'qpopper-poppassd-root-access(11877)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11877'}, {'name': '7447', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7447'}]
CVE State: PUBLISHED
Explain CVE-2003-1453
Cross-site scripting (XSS) vulnerability in the MytextSanitizer function in XOOPS 1.3.5 through 1.3.9 and XOOPS 2.0 through 2.0.1 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in an IMG tag.
Affected Products: n/a
References: [{'name': '20030425 XOOPS MyTextSanitizer CSS 1.3x & 2.x', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/319715'}, {'name': 'xoops-mytextsanitizer-xss(11872)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11872'}, {'name': '7434', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7434'}, {'name': '3269', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3269'}]
CVE State: PUBLISHED
Explain CVE-2003-1454
Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie in plaintext, which could allow remote attackers to gain access.
Affected Products: n/a
References: [{'name': 'invision-admin-plaintext-password(11871)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11871'}, {'name': '7440', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7440'}, {'name': '20030425 Invision Power Board Plaintext Password Disclosure Vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/319747'}, {'name': '3276', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3276'}]
CVE State: PUBLISHED
Explain CVE-2003-1455
Multiple buffer overflows in the launch_bcrelay function in pptpctrl.c in PoPToP 1.1.4-b1 through PoPToP 1.1.4-b3 allow local users to execute arbitrary code.
Affected Products: n/a
References: [{'name': '7582', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7582'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=138437'}, {'name': '7590', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7590'}, {'name': 'poptop-launchbcrelay-pptpctrlc-bo(12101)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12101'}]
CVE State: PUBLISHED
Explain CVE-2003-1456
Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via unknown attack vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://perl.bobbitt.ca/yabbse/index.php?board=2%3Baction=display%3Bthreadid=720'}, {'name': '3270', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3270'}, {'name': 'albumpl-command-execution(11878)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11878'}, {'name': '20030426 Album.pl Vulnerability - Remote Command Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/319763'}, {'name': '7444', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7444'}]
CVE State: PUBLISHED
Explain CVE-2003-1457
Auerswald COMsuite CTI ControlCenter 3.1 creates a default "runasositron" user account with an easily guessable password, which allows local users or remote attackers to gain access.
Affected Products: n/a
References: [{'name': '7458', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7458'}, {'name': '20030429 Auerswald COMsuite/ Back Door', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/319946'}, {'name': '3282', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3282'}, {'name': 'comsuite-runasositron-backdoor-account(11923)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11923'}]
CVE State: PUBLISHED
Explain CVE-2003-1458
SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to execute arbitrary SQL commands via the member name.
Affected Products: n/a
References: [{'name': 'ttcms-profile-sql-injection(12273)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12273'}, {'name': '3278', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3278'}, {'name': '7543', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7543'}, {'name': '20030509 ttcms and ttforum exploits', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/321000'}]
CVE State: PUBLISHED
Explain CVE-2003-1459
Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote attackers to execute arbitrary PHP code via the (1) template parameter in News.php or (2) installdir parameter in install.php.
Affected Products: n/a
References: [{'name': 'ttcms-ttforum-file-include(12271)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12271'}, {'name': '7542', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7542'}, {'name': '3278', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3278'}, {'name': '20030509 ttcms and ttforum exploits', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/321000'}]
CVE State: PUBLISHED
Explain CVE-2003-1460
Worker Filemanager 1.0 through 2.7 sets the permissions on the destination directory to world-readable and executable while copying data, which could allow local users to obtain sensitive information.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.boomerangsworld.de/worker/wchanges.php3?lang=en'}, {'name': '7460', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7460'}]
CVE State: PUBLISHED
Explain CVE-2003-1461
Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument.  NOTE: the vendor was unable to reproduce the problem on a system that had been patched for an lp vulnerability (CVE-2002-1473).
Affected Products: n/a
References: [{'name': '7489', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7489'}, {'name': '20030503 rwrite buffer overflow in hp-ux', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/320371'}, {'name': '20030502 HP-UX 11.0 /usr/lbin/rwrite', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/320323'}, {'name': '3283', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3283'}, {'name': 'oval:org.mitre.oval:def:4897', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4897'}, {'name': 'hp-rwrite-bo(11919)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11919'}]
CVE State: PUBLISHED
Explain CVE-2003-1462
mod_survey 3.0.0 through 3.0.15-pre6 does not check whether a survey exists before creating a subdirectory for it, which allows remote attackers to cause a denial of service (disk consumption and possible crash).
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://gathering.itm.mh.se/modsurvey/changelog.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gathering.itm.mh.se/modsurvey/SA20030504.txt'}, {'name': 'modsurvey-nonexistent-survey-dos(11861)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11861'}, {'name': '7498', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7498'}, {'name': '20030504 Mod_Survey SYSBASE vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-05/0058.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1463
Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1) determine the installation path by reading the contents of the Name parameter in a link, and (2) read arbitrary files via an absolute path in the Name parameter.
Affected Products: n/a
References: [{'name': '7438', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7438'}, {'name': '7439', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7439'}, {'name': 'webadmin-webadmindll-path-disclosure(11874)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11874'}, {'name': '3286', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3286'}, {'name': 'webadmin-webadmindll-view-files(11875)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11875'}, {'name': '20030425 Path disclosure and file access on WebAdmin', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/319735'}]
CVE State: PUBLISHED
Explain CVE-2003-1464
Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service (disconnect and unavailable inbox) via a Short Message Service (SMS) message with a long image name.
Affected Products: n/a
References: [{'name': 'siemens-sms-image-bo(11950)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11950'}, {'name': '20030506 Siemens Mobile Phone - Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/320555'}, {'name': '3287', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3287'}, {'name': '7507', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7507'}]
CVE State: PUBLISHED
Explain CVE-2003-1465
Directory traversal vulnerability in download.php in Phorum 3.4 through 3.4.2 allows remote attackers to read arbitrary files.
Affected Products: n/a
References: [{'name': '7569', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7569'}, {'name': 'phorum-download-directory-traversal(12482)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12482'}, {'name': '3288', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3288'}, {'name': '20030513 Phorum Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/321310'}]
CVE State: PUBLISHED
Explain CVE-2003-1466
Unspecified vulnerability in Phorum 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to other sites via (1) register.php or (2) login.php.
Affected Products: n/a
References: [{'name': '7583', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7583'}, {'name': '7581', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7581'}, {'name': '3288', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3288'}, {'name': '20030513 Phorum Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/321310'}]
CVE State: PUBLISHED
Explain CVE-2003-1467
Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (4) common.php in Phorum before 3.4.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Affected Products: n/a
References: [{'name': '7572', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7572'}, {'name': '7576', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7576'}, {'name': '7573', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7573'}, {'name': '3288', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3288'}, {'name': 'phorum-register-html-injection(12502)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12502'}, {'name': '7577', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7577'}, {'name': '7584', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7584'}, {'name': 'phorum-multiple-xss(12487)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12487'}, {'name': '20030513 Phorum Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/321310'}]
CVE State: PUBLISHED
Explain CVE-2003-1468
The Web_Links module in PHP-Nuke 6.0 through 6.5 final allows remote attackers to obtain the full web server path via an invalid cid parameter that is non-numeric or null, which leaks the pathname in an error message.
Affected Products: n/a
References: [{'name': '20030512 Re: Lot of SQL injection on PHP-Nuke 6.5 (secure weblog!)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/321313'}, {'name': '7589', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7589'}, {'name': 'phpnuke-weblinks-path-disclosure(12436)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12436'}]
CVE State: PUBLISHED
Explain CVE-2003-1469
The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message.
Affected Products: n/a
References: [{'name': '20030426 NII Advisory - Path Disclosure in Cold Fusion MX Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/319867'}, {'name': 'coldfusion-mx-path-disclosure(11879)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11879'}, {'name': '7443', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7443'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nii.co.in/vuln/pdmac.html'}, {'name': '3307', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3307'}]
CVE State: PUBLISHED
Explain CVE-2003-1470
Buffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a CREATE command with a long mailbox name.
Affected Products: n/a
References: [{'name': '7446', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7446'}, {'name': '3296', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3296'}, {'name': '20030427 MDaemon SMTP/POP/IMAP server  =>v.6.7.5: IMAP buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/319879'}, {'name': 'mdaemon-imap-create-bo(11896)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11896'}]
CVE State: PUBLISHED
Explain CVE-2003-1471
MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service (crash) via a (1) DELE or (2) UIDL with a negative number.
Affected Products: n/a
References: [{'name': 'mdaemon-pop3-negative-dos(11882)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11882'}, {'name': '20030428 RE: MDaemon SMTP/POP/IMAP server: =>6.0.7: POP remote DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-04/0359.html'}, {'name': '7445', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7445'}, {'name': '20030428 MDaemon SMTP/POP/IMAP server: =>6.0.7: POP remote DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archive.cert.uni-stuttgart.de/bugtraq/2003/04/msg00364.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1472
Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long banner.
Affected Products: n/a
References: [{'name': '3297', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3297'}, {'name': '3dftp-ftp-banner-bo(11883)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11883'}, {'name': '7451', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7451'}, {'name': '20030428 Buffer overflow in 3D-ftp', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/319818'}]
CVE State: PUBLISHED
Explain CVE-2003-1473
Buffer overflow in LTris 1.0.1 of FreeBSD Ports Collection 2003-02-25 and earlier allows local users to execute arbitrary code with gid "games" permission via a long HOME environment variable.
Affected Products: n/a
References: [{'name': 'ltris-bo(11978)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11978'}, {'name': '20030508 ltris-and-slashem-tty possible trouble', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/321001'}, {'name': '20030509 ltris-and-slashem-tty possible trouble', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2003-05/0122.html'}, {'name': '7537', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7537'}]
CVE State: PUBLISHED
Explain CVE-2003-1474
slashem-tty in the FreeBSD Ports Collection is installed with write permissions for the games group, which allows local users with group games privileges to modify slashem-tty and execute arbitrary code as other users, as demonstrated using a separate vulnerability in LTris.
Affected Products: n/a
References: [{'name': '20030508 ltris-and-slashem-tty possible trouble', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/321001'}, {'name': 'slashem-tty-insecure-permissions(11979)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11979.php'}, {'name': '20030509 ltris-and-slashem-tty possible trouble', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2003-05/0122.html'}]
CVE State: PUBLISHED
Explain CVE-2003-1475
Netbus 1.5 through 1.7 allows more than one client to be connected at the same time, but only prompts the first connection for authentication, which allows remote attackers to gain access.
Affected Products: n/a
References: [{'name': 'netbus-password-authentication-bypass(11982)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11982'}, {'name': '3289', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3289'}, {'name': '20030509 Netbus 1.x exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/320980'}, {'name': '7538', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7538'}]
CVE State: PUBLISHED
Explain CVE-2003-1476
Cerberus FTP Server 2.1 stores usernames and passwords in plaintext, which could allow local users to gain access.
Affected Products: n/a
References: [{'name': '7556', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7556'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cerberusftp.com/cerberus-releasenotes.htm#KnownIssues'}]
CVE State: PUBLISHED
Explain CVE-2003-1477
MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) via a PowerPoint attachment that either (1) is corrupt or (2) contains "embedded objects."
Affected Products: n/a
References: [{'name': '7562', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7562'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.clearswift.com/download/bin/Patches/ReadMe_SMTP_438.htm'}, {'name': 'mailsweeper-powerpoint-file-dos(12052)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12052'}]
CVE State: PUBLISHED
Explain CVE-2003-1478
Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with a "xFFxFE" byte sequence and a large number of CRLF sequences, as demonstrated using freeze.htm.
Affected Products: n/a
References: [{'name': '7486', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7486'}, {'name': 'kde-konqueror-dos(11971)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11971'}, {'name': '20030502 Re: April appeared to be a month of IE bugs. Here', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/320266'}]
CVE State: PUBLISHED
Explain CVE-2003-1479
Cross-site scripting (XSS) vulnerability in webcamXP 1.02.432 and 1.02.535 allows remote attackers to inject arbitrary web script or HTML via the message field.
Affected Products: n/a
References: [{'name': '20030502 Code Injection Vulnerabilities in WebcamXP Chat Feature', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/320345'}, {'name': '7490', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7490'}, {'name': '3304', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3304'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.frame4.com/content/advisories/FSA-2003-002.txt'}, {'name': 'webcamxp-multiple-xss(11952)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11952'}]
CVE State: PUBLISHED
Explain CVE-2003-1480
MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods.
Affected Products: n/a
References: [{'name': '8753', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8753'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/tools/5WP031FA0U.html'}, {'name': '7500', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7500'}]
CVE State: PUBLISHED
Explain CVE-2003-1481
CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.
Affected Products: n/a
References: [{'name': '20030504 CommuniGatePro 4.0.6 [EXPLOIT]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/320438'}, {'name': '3290', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/3290'}, {'name': '7501', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7501'}, {'name': 'communigate-pro-session-hijacking(11932)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11932'}]
CVE State: PUBLISHED
Explain CVE-2003-1482
The backup configuration file for Microsoft MN-500 wireless base station stores administrative passwords in plaintext, which allows local users to gain access.
Affected Products: n/a
References: [{'name': '7496', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7496'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.kurczaba.com/html/security/0305031.htm'}, {'name': '1006691', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1006691'}]
CVE State: PUBLISHED
Explain CVE-2003-1483
FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access.
Affected Products: n/a
References: [{'name': 'flashfxp-weak-password-encryption(12298)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12298'}, {'name': '1006730', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1006730'}, {'name': '7499', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7499'}, {'tags': ['x_refsource_MISC'], 'url': 'http://downloads.securityfocus.com/vulnerabilities/exploits/flashfxp_decrypt.c'}]
CVE State: PUBLISHED