Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2003-0034
Buffer overflow in the mtink status monitor, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long HOME environment variable.
Affected Products: n/a
References: [{'name': '20030121 iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0029.html'}, {'name': '1005959', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1005959'}, {'name': 'MDKSA-2003:010', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:010'}, {'name': '6656', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6656'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/01.21.03.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0035
Buffer overflow in escputil, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long printer-name command line argument.
Affected Products: n/a
References: [{'name': '6658', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6658'}, {'name': '20030121 iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0029.html'}, {'name': '1005959', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1005959'}, {'name': 'MDKSA-2003:010', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:010'}, {'name': '20030121 iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/307608/30/26270/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/01.21.03.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0036
ml85p, as included in the printer-drivers package for Mandrake Linux, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable filenames of the form "mlg85p%d".
Affected Products: n/a
References: [{'name': '20030121 iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0029.html'}, {'name': '1005959', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1005959'}, {'name': 'MDKSA-2003:010', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:010'}, {'name': '20030121 iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/307608/30/26270/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/01.21.03.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0037
Buffer overflows in noffle news server 1.0.1 and earlier allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code.
Affected Products: n/a
References: [{'name': 'DSA-244', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-244'}, {'name': 'noffle-multiple-bo(11181)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11181'}, {'name': '7955', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7955'}, {'name': '6695', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6695'}]
CVE State: PUBLISHED
Explain CVE-2003-0038
Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.
Affected Products: n/a
References: [{'name': '20030124 Mailman: cross-site scripting bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104342745916111'}, {'name': '9205', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/9205'}, {'name': '6677', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6677'}, {'name': '1005987', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1005987'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://telia.dl.sourceforge.net/sourceforge/mailman/xss-2.1.0-patch.txt'}, {'name': 'mailman-email-variable-xss(11152)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11152'}, {'name': 'DSA-436', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-436'}]
CVE State: PUBLISHED
Explain CVE-2003-0039
ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storm) via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count.
Affected Products: n/a
References: [{'name': 'CLSA-2003:616', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000616'}, {'name': 'VU#149953', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/149953'}, {'name': 'DSA-245', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-245'}, {'name': 'TLSA-2003-26', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://cc.turbolinux.com/security/TLSA-2003-26.txt'}, {'name': 'RHSA-2003:034', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-034.html'}, {'name': '20030219 [OpenPKG-SA-2003.012] OpenPKG Security Advisory (dhcpd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.openpkg.org/security/OpenPKG-SA-2003.012-dhcpd.html'}, {'name': 'dhcp-dhcrelay-dos(11187)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11187'}, {'name': '20030115 DoS against DHCP infrastructure with isc dhcrelay', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104310927813830&w=2'}, {'name': '6628', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6628'}]
CVE State: PUBLISHED
Explain CVE-2003-0040
SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name.
Affected Products: n/a
References: [{'name': 'DSA-247', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-247'}, {'name': 'courierimap-authmysqllib-sql-injection(11213)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11213'}, {'name': '6738', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6738'}]
CVE State: PUBLISHED
Explain CVE-2003-0041
Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client.
Affected Products: n/a
References: [{'name': '8114', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8114'}, {'name': '7979', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7979'}, {'name': '20030128 MIT Kerberos FTP client remote shell commands execution', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0047.html'}, {'name': 'RHSA-2003:020', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-020.html'}, {'name': 'MDKSA-2003:021', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:021'}]
CVE State: PUBLISHED
Explain CVE-2003-0042
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.
Affected Products: n/a
References: [{'name': 'DSA-246', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-246'}, {'name': '6721', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6721'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/'}, {'name': '20030130 Apache Jakarta Tomcat 3 URL parsing vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104394568616290&w=2'}, {'name': 'HPSBUX0303-249', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/5111'}, {'name': 'tomcat-null-directory-listing(11194)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11194'}, {'name': 'N-060', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-060.shtml'}, {'name': '7977', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7977'}, {'name': '7972', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7972'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0043
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.
Affected Products: n/a
References: [{'name': 'DSA-246', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-246'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/'}, {'name': 'HPSBUX0303-249', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/5111'}, {'name': 'N-060', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-060.shtml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt'}, {'name': '6722', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6722'}, {'name': 'tomcat-webxml-read-files(11195)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11195'}]
CVE State: PUBLISHED
Explain CVE-2003-0044
Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML.
Affected Products: n/a
References: [{'name': 'DSA-246', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-246'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/'}, {'name': '6720', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6720'}, {'name': 'HPSBUX0303-249', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/5111'}, {'name': 'tomcat-web-app-xss(11196)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11196'}, {'name': 'N-060', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-060.shtml'}, {'name': '9204', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/9204'}, {'name': '7972', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7972'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt'}, {'name': '9203', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/9203'}]
CVE State: PUBLISHED
Explain CVE-2003-0045
Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt'}, {'name': 'jakarta-tomcat-msdos-dos(12102)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12102'}]
CVE State: PUBLISHED
Explain CVE-2003-0046
AbsoluteTelnet SSH2 client does not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.
Affected Products: n/a
References: [{'name': '20030129 iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104386492422014&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.celestialsoftware.net/telnet/beta_software.html'}, {'name': '7686', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7686'}, {'name': '1006013', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006013'}, {'name': '6725', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6725'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/01.28.03.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0047
SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.
Affected Products: n/a
References: [{'name': '20030129 iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104386492422014&w=2'}, {'name': '6727', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6727'}, {'name': '6728', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6728'}, {'name': '1006011', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006011'}, {'name': '1006010', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006010'}, {'name': '1006012', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006012'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/01.28.03.txt'}, {'name': '6726', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6726'}]
CVE State: PUBLISHED
Explain CVE-2003-0048
PuTTY 0.53b and earlier does not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials.
Affected Products: n/a
References: [{'name': '20030129 iDEFENSE Security Advisory 01.28.03: SSH2 Clients Insecurely Store Passwords', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104386492422014&w=2'}, {'name': '1006014', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006014'}, {'name': '6724', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6724'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/01.28.03.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0049
Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.
Affected Products: n/a
References: [{'name': '6860', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6860'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt'}, {'name': '1006107', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1006107'}, {'name': 'macos-afp-unauthorized-access(11333)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11333.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=61798'}]
CVE State: PUBLISHED
Explain CVE-2003-0050
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt'}, {'name': 'quicktime-darwin-command-execution(11401)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11401.php'}, {'name': '6954', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6954'}, {'name': '20030224 QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104618904330226&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0051
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path of the server's installation path via a NULL file parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt'}, {'name': '6956', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6956'}, {'name': '20030224 QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104618904330226&w=2'}, {'name': 'quicktime-darwin-path-disclosure(11402)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11402.php'}]
CVE State: PUBLISHED
Explain CVE-2003-0052
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to list arbitrary directories.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt'}, {'name': '6955', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6955'}, {'name': 'quicktime-darwin-directory-disclosure(11403)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11403.php'}, {'name': '20030224 QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104618904330226&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0053
Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to insert arbitrary script via the filename parameter, which is inserted into an error message.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt'}, {'name': '6958', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6958'}, {'name': 'quicktime-darwin-parsexml-xss(11404)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11404.php'}, {'name': '20030224 QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104618904330226&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0054
Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to the rtsp DESCRIBE method, which is inserted into a log file and executed when the log is viewed using a browser.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt'}, {'name': 'quicktime-darwin-describe-xss(11405)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11405.php'}, {'name': '6960', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6960'}, {'name': '20030224 QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104618904330226&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0055
Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via a long filename.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt'}, {'name': '6957', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6957'}, {'name': '20030224 QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104618904330226&w=2'}, {'name': 'quicktime-darwin-mp3-bo(11406)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11406.php'}]
CVE State: PUBLISHED
Explain CVE-2003-0056
Buffer overflow in secure locate (slocate) before 2.7 allows local users to execute arbitrary code via a long (1) -c or (2) -r command line argument.
Affected Products: n/a
References: [{'name': '8236', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8236'}, {'name': 'CLA-2003:643', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://www.net-security.org/advisory.php?id=2010'}, {'name': '20040202-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc'}, {'name': '7982', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7982'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.usg.org.uk/advisories/2003.001.txt'}, {'name': 'MDKSA-2003:015', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:015'}, {'name': '10720', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10720'}, {'name': 'DSA-252', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-252'}, {'name': '20030125 Re: [USG- SA- 2003.001] USG Security Advisory (slocate)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104348607205691&w=2'}, {'name': '20030202 GLSA:  slocate', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104428624705363&w=2'}, {'name': '8118', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8118/'}, {'name': 'oval:org.mitre.oval:def:11369', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11369'}, {'name': 'RHSA-2004:041', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2004-041.html'}, {'name': '20030124 [USG- SA- 2003.001] USG Security Advisory (slocate)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104342864418213&w=2'}, {'name': '8749', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8749'}, {'name': 'CSSA-2003-009.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-009.0.txt'}, {'name': '7947', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7947'}, {'name': '8007', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8007'}]
CVE State: PUBLISHED
Explain CVE-2003-0057
Multiple buffer overflows in Hypermail 2 before 2.1.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code (1) via a long attachment filename that is not properly handled by the hypermail executable, or (2) by connecting to the mail CGI program from an IP address that reverse-resolves to a long hostname.
Affected Products: n/a
References: [{'name': 'hypermail-mail-attachment-bo(11157)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11157'}, {'name': '6690', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6690'}, {'name': '8030', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8030'}, {'name': '20030127 Hypermail buffer overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104369136703903&w=2'}, {'name': '20030126 Hypermail buffer overflows', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0042.html'}, {'name': 'hypermail-long-hostname-bo(11158)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11158'}, {'name': 'DSA-248', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-248'}, {'name': '6689', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6689'}]
CVE State: PUBLISHED
Explain CVE-2003-0058
MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference.
Affected Products: n/a
References: [{'name': 'RHSA-2003:052', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-052.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-001-multiple.txt'}, {'name': 'CLSA-2003:639', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000639'}, {'name': 'RHSA-2003:051', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-051.html'}, {'name': 'MDKSA-2003:043', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:043'}, {'name': 'oval:org.mitre.oval:def:1110', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1110'}, {'name': 'kerberos-kdc-null-pointer-dos(10099)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10099'}, {'name': 'VU#661243', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/661243'}, {'name': '50142', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/50142'}, {'name': '6683', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6683'}, {'name': 'RHSA-2003:168', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-168.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0059
Unknown vulnerability in the chk_trans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate users in other realms that have the same inter-realm keys.
Affected Products: n/a
References: [{'name': 'RHSA-2003:052', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-052.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-001-multiple.txt'}, {'name': 'CLSA-2003:639', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000639'}, {'name': 'RHSA-2003:051', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-051.html'}, {'name': 'MDKSA-2003:043', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:043'}, {'name': '6714', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6714'}, {'name': 'kerberos-kdc-user-spoofing(11188)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11188'}, {'name': 'VU#684563', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/684563'}, {'name': 'RHSA-2003:168', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-168.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0060
Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in Kerberos principal names.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-001-multiple.txt'}, {'name': 'CLSA-2003:639', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000639'}, {'name': '6712', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6712'}, {'name': 'VU#787523', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/787523'}, {'name': 'kerberos-kdc-format-string(11189)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11189'}, {'name': '4879', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4879'}]
CVE State: PUBLISHED
Explain CVE-2003-0061
Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable.
Affected Products: n/a
References: [{'name': '20030203 HP UX passwd Binary Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=87&type=vulnerabilities&flashstatus=true'}]
CVE State: PUBLISHED
Explain CVE-2003-0062
Buffer overflow in Eset Software NOD32 for UNIX before 1.013 allows local users to execute arbitrary code via a long path name.
Affected Products: n/a
References: [{'name': 'nod32-pathname-bo(11282)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11282.php'}, {'name': '20030210 iDEFENSE Security Advisory 02.10.03: Buffer Overflow In NOD32 Antivirus Software for Unix', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104490777824360&w=2'}, {'name': '6803', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6803'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/02.10.03.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0063
The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
Affected Products: n/a
References: [{'name': 'DSA-380', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-380'}, {'name': 'RHSA-2003:067', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-067.html'}, {'name': 'RHSA-2003:066', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-066.html'}, {'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104612710031920&w=2'}, {'name': 'RHSA-2003:064', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-064.html'}, {'name': 'RHSA-2003:065', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-065.html'}, {'name': '6940', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6940'}, {'name': 'terminal-emulator-window-title(11414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11414.php'}, {'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0064
The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
Affected Products: n/a
References: [{'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104612710031920&w=2'}, {'name': 'HPSBUX0401-309', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/6236'}, {'name': 'terminal-emulator-window-title(11414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11414.php'}, {'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html'}, {'name': '6942', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6942'}]
CVE State: PUBLISHED
Explain CVE-2003-0065
The uxterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
Affected Products: n/a
References: [{'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104612710031920&w=2'}, {'name': 'terminal-emulator-window-title(11414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11414.php'}, {'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html'}, {'name': '6945', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6945'}]
CVE State: PUBLISHED
Explain CVE-2003-0066
The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
Affected Products: n/a
References: [{'name': '200303-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.securityfocus.com/advisories/5137'}, {'name': 'MDKSA-2003:003', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:003'}, {'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104612710031920&w=2'}, {'name': 'RHSA-2003:054', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-054.html'}, {'name': 'RHSA-2003:055', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-055.html'}, {'name': '6953', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6953'}, {'name': 'terminal-emulator-window-title(11414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11414.php'}, {'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0067
The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
Affected Products: n/a
References: [{'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104612710031920&w=2'}, {'name': 'terminal-emulator-window-title(11414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11414.php'}, {'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0068
The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
Affected Products: n/a
References: [{'name': '10237', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10237'}, {'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104612710031920&w=2'}, {'name': 'MDKSA-2003:040', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:040'}, {'name': 'DSA-496', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-496'}, {'name': 'terminal-emulator-window-title(11414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11414.php'}, {'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0069
The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
Affected Products: n/a
References: [{'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104612710031920&w=2'}, {'name': 'terminal-emulator-window-title(11414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11414.php'}, {'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html'}, {'name': '8347', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8347'}]
CVE State: PUBLISHED
Explain CVE-2003-0070
VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
Affected Products: n/a
References: [{'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104612710031920&w=2'}, {'name': 'RHSA-2003:053', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-053.html'}, {'name': 'terminal-emulator-window-title(11414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11414.php'}, {'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html'}, {'name': 'GLSA-200303-2', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://seclists.org/lists/bugtraq/2003/Mar/0010.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0071
The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows attackers to cause a denial of service via a certain character escape sequence that causes the terminal to enter a tight loop.
Affected Products: n/a
References: [{'name': 'DSA-380', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-380'}, {'name': 'RHSA-2003:067', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-067.html'}, {'name': 'RHSA-2003:066', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-066.html'}, {'name': 'terminal-emulator-dec-udk(11415)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11415.php'}, {'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104612710031920&w=2'}, {'name': 'RHSA-2003:064', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-064.html'}, {'name': '6950', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6950'}, {'name': 'RHSA-2003:065', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-065.html'}, {'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0072
The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array (aka "array overrun").
Affected Products: n/a
References: [{'name': 'RHSA-2003:052', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-052.html'}, {'name': '20030331 GLSA: krb5 & mit-krb5 (200303-28)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/316960/30/25250/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-005-buf.txt'}, {'name': 'RHSA-2003:051', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-051.html'}, {'name': '7184', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7184'}, {'name': 'DSA-266', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-266'}, {'name': '54042', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-54042-1'}]
CVE State: PUBLISHED
Explain CVE-2003-0073
Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user.
Affected Products: n/a
References: [{'name': 'CLA-2003:743', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000743'}, {'name': 'DSA-303', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-303'}, {'name': 'RHSA-2003:093', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-093.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mysql.com/doc/en/News-3.23.55.html'}, {'name': 'RHSA-2003:166', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-166.html'}, {'name': 'RHSA-2003:094', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-094.html'}, {'name': 'mysql-mysqlchangeuser-doublefree-dos(11199)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11199.php'}, {'name': 'MDKSA-2003:013', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:013'}, {'name': 'ESA-20030220-004', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/engarde_advisory-2873.html'}, {'name': 'oval:org.mitre.oval:def:436', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A436'}, {'name': '20030129 [OpenPKG-SA-2003.008] OpenPKG Security Advisory (mysql)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104385719107879&w=2'}, {'name': '6718', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6718'}]
CVE State: PUBLISHED
Explain CVE-2003-0074
Format string vulnerability in mpmain.c for plpnfsd of the plptools package allows remote attackers to execute arbitrary code via the functions (1) debuglog, (2) errorlog, and (3) infolog.
Affected Products: n/a
References: [{'name': '20030129 Re: Local root vuln in SuSE 8.0 plptools package', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104386699725019&w=2'}, {'name': '6715', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6715'}, {'name': '20030129 Local root vuln in SuSE 8.0 plptools package', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104385772908969&w=2'}, {'name': 'plptools-plpnsfd-format-string(11193)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11193.php'}]
CVE State: PUBLISHED