Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2003-0575
Heap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUTH_UNIX gid list.
Affected Products: n/a
References: [{'name': '20030704-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030704-01-P'}, {'name': '8304', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8304'}, {'name': 'irix-authunix-nsd-bo(12763)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12763'}, {'name': '9390', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/9390'}, {'name': 'N-130', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-130.shtml'}, {'name': '20030730 [LSD] IRIX nsd remote buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105958240709302&w=2'}, {'name': '2337', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2337'}, {'name': 'VU#682900', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/682900'}]
CVE State: PUBLISHED
Explain CVE-2003-0576
Unknown vulnerability in the NFS daemon (nfsd) in SGI IRIX 6.5.19f and earlier allows remote attackers to cause a denial of service (kernel panic) via certain packets that cause XDR decoding errors, a different vulnerability than CVE-2003-0619.
Affected Products: n/a
References: [{'name': '20030801-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030801-01-P'}, {'name': '20030801-02-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030801-02-P'}]
CVE State: PUBLISHED
Explain CVE-2003-0577
mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size.
Affected Products: n/a
References: [{'name': 'CSSA-2004-002.0', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-002.0/CSSA-2004-002.0.txt'}, {'name': 'MDKSA-2003:078', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:078'}, {'name': '20030116 Re[2]: Local/remote mpg123 exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/306903'}, {'name': 'CLA-2003:695', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000695'}, {'name': '7875', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7875'}, {'name': '6629', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6629'}]
CVE State: PUBLISHED
Explain CVE-2003-0578
cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users to gain privileges by deleting and overwriting arbitrary files.
Affected Products: n/a
References: [{'name': '20030716 SRT2003-07-07-0831 - IBM U2 UniVerse cci_dir creates hard links as root', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105839150004682&w=2'}, {'name': '20030716 SRT2003-07-07-0831 - IBM U2 UniVerse cci_dir creates hard links as root', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0025.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0579
uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and execute the uv.install program, which allows local users to gain privileges by providing a pathname that is under control of the user.
Affected Products: n/a
References: [{'name': '20030716 SRT2003-07-07-0833 - IBM U2 UniVerse users with uvadm rights can take root via uvadmsh', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0026.html'}, {'name': '20030716 SRT2003-07-07-0833 - IBM U2 UniVerse users with uvadm rights can take root via uvadmsh', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105838948002337&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0580
Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument.
Affected Products: n/a
References: [{'name': '20030716 SRT2003-07-08-1223 - IBM U2 UniVerse uvadm can take root via buffer overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105839042603476&w=2'}, {'name': '20030716 SRT2003-07-08-1223 - IBM U2 UniVerse uvadm can take root via buffer overflows', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0028.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0581
X Fontserver for Truetype fonts (xfstt) 1.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a (1) FS_QueryXExtents8 or (2) FS_QueryXBitmaps8 packet, and possibly other types of packets, with a large num_ranges value, which causes an out-of-bounds array access.
Affected Products: n/a
References: [{'name': 'DSA-360', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-360'}, {'name': '20030714 xfstt-1.4 vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105829691405446&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0583
Buffer overflow in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via a long command line argument.
Affected Products: n/a
References: [{'name': '20030716 SRT2003-07-16-0358 - bru has buffer overflow and format issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105846288808846&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0584
Format string vulnerability in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument.
Affected Products: n/a
References: [{'name': '20030716 SRT2003-07-16-0358 - bru has buffer overflow and format issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105846288808846&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0585
SQL injection vulnerability in login.asp of Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to bypass authentication and execute arbitrary SQL code via the (1) user or (2) pass parameters.
Affected Products: n/a
References: [{'name': '20030717 eStore SQL Injection Vulnerability & Path Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105845898003616&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0586
Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php.
Affected Products: n/a
References: [{'name': '20030717 eStore SQL Injection Vulnerability & Path Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105845898003616&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0587
Cross-site scripting (XSS) vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.x allows remote authenticated users to execute arbitrary web script and gain administrative access via the "displayed name" attribute of the "ubber" cookie.
Affected Products: n/a
References: [{'name': '20030716 Changing UBB cookie allows account hijack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105839276105934&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0588
admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.
Affected Products: n/a
References: [{'name': '20030716 Digi-news and Digi-ads version 1.1 admin access without password', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105839007002993&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0589
admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.
Affected Products: n/a
References: [{'name': '20030716 Digi-news and Digi-ads version 1.1 admin access without password', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105839007002993&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0590
Cross-site scripting (XSS) vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon (image_subject) field.
Affected Products: n/a
References: [{'name': '20030715 Splatt Forum html injection code in post icon', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105830019209609&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://members.fortunecity.it/lethalman2002/bugs/splatt.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0592
Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Konqueror to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
Affected Products: n/a
References: [{'name': '20040310 Corsaire Security Advisory: Multiple vendor HTTP user agent cookie path traversal issue', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html'}, {'name': '20040310 Corsaire Security Advisory: Multiple vendor HTTP user agent cookie path traversal issue', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html'}, {'name': 'DSA-459', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-459'}, {'name': 'oval:org.mitre.oval:def:823', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A823'}, {'name': 'RHSA-2004:074', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-074.html'}, {'name': 'MDKSA-2004:022', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:022'}]
CVE State: PUBLISHED
Explain CVE-2003-0593
Opera allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Opera to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
Affected Products: n/a
References: [{'name': '20040310 Corsaire Security Advisory: Multiple vendor HTTP user agent cookie path traversal issue', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html'}, {'name': '20040310 Corsaire Security Advisory: Multiple vendor HTTP user agent cookie path traversal issue', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0594
Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Mozilla to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
Affected Products: n/a
References: [{'name': '20040310 Corsaire Security Advisory: Multiple vendor HTTP user agent cookie path traversal issue', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html'}, {'name': '20040310 Corsaire Security Advisory: Multiple vendor HTTP user agent cookie path traversal issue', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html'}, {'name': 'oval:org.mitre.oval:def:917', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A917'}, {'name': 'RHSA-2004:112', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-112.html'}, {'name': 'oval:org.mitre.oval:def:9826', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9826'}, {'name': 'MDKSA-2004:021', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:021'}, {'name': 'oval:org.mitre.oval:def:873', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A873'}]
CVE State: PUBLISHED
Explain CVE-2003-0595
Buffer overflow in WiTango Application Server and Tango 2000 allows remote attackers to execute arbitrary code via a long cookie to Witango_UserReference.
Affected Products: n/a
References: [{'name': '20030718 Witango & Tango 2000 Application Server Remote System Buffer Overrun', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0038.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0596
FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdclone users by creating the directory ahead of time.
Affected Products: n/a
References: [{'name': 'DSA-352', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2003/dsa-352'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=186219'}]
CVE State: PUBLISHED
Explain CVE-2003-0597
Unknown vulnerability in display of Merge before 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'CSSA-2003-SCO-11', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'http://marc.info/?l=bugtraq&m=105889063714201&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0599
Unknown vulnerability in the Virtual File System (VFS) capability for phpGroupWare 0.9.16preRC and versions before 0.9.14.004 with unknown implications, related to the VFS path being under the web document root.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.phpgroupware.org'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://mail.gnu.org/archive/html/phpgroupware-users/2003-07/msg00035.html'}, {'name': 'DSA-365', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-365'}]
CVE State: PUBLISHED
Explain CVE-2003-0601
Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved.
Affected Products: n/a
References: [{'name': '8266', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8266'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=25631'}, {'name': 'macos-workgroup-gain-access(12728)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12728'}]
CVE State: PUBLISHED
Explain CVE-2003-0602
Multiple cross-site scripting vulnerabilities (XSS) in Bugzilla 2.16.x before 2.16.3 and 2.17.x before 2.17.4 allow remote attackers to insert arbitrary HTML or web script via (1) multiple default German and Russian HTML templates or (2) ALT and NAME attributes in AREA tags as used by the GraphViz graph generation feature for local dependency graphs.
Affected Products: n/a
References: [{'name': '6861', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6861'}, {'name': 'CLA-2003:653', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000653'}, {'name': '6868', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6868'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bugzilla.org/security/2.16.2/'}]
CVE State: PUBLISHED
Explain CVE-2003-0603
Bugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versions allows local users to overwrite arbitrary files via a symlink attack on temporary files that are created in directories with group-writable or world-writable permissions.
Affected Products: n/a
References: [{'name': 'CLA-2003:653', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000653'}, {'name': '7412', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7412'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bugzilla.org/security/2.16.2/'}]
CVE State: PUBLISHED
Explain CVE-2003-0604
Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File:// URL.
Affected Products: n/a
References: [{'name': '20030723 Re: Drivial Pursuit: Internet Explorer Browser & Your Files and Folders !', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=105906261314411&w=2'}, {'name': '20030723 Drivial Pursuit: Internet Explorer Browser & Your Files and Folders !', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=105899408520292&w=2'}, {'name': '20030723 Drivial Pursuit: Internet Explorer Browser & Your Files and Folders !', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105899261818572&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.pivx.com/larholm/unpatched/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.malware.com/once.again%21.html'}, {'name': '20030723 Re: Drivial Pursuit: Internet Explorer Browser & Your Files and Folders !', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105906867322856&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0605
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.
Affected Products: n/a
References: [{'name': '20030720 Microsoft Windows 2000 RPC DCOM Interface DOS AND Privilege Escalation Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105880332428706&w=2'}, {'name': '20030721 Microsoft Windows 2000 RPC DCOM Interface DOS AND Privilege Escalation Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006851.html'}, {'name': 'CA-2003-23', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2003-23.html'}, {'name': 'oval:org.mitre.oval:def:494', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A494'}, {'name': 'oval:org.mitre.oval:def:1118', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1118'}, {'name': 'CA-2003-19', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2003-19.html'}, {'name': 'VU#326746', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/326746'}, {'name': 'MS03-039', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-039'}]
CVE State: PUBLISHED
Explain CVE-2003-0606
sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.
Affected Products: n/a
References: [{'name': 'DSA-353', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-353'}]
CVE State: PUBLISHED
Explain CVE-2003-0607
Buffer overflow in xconq 7.4.1 allows local users to become part of the "games" group via the (1) USER or (2) DISPLAY environment variables.
Affected Products: n/a
References: [{'name': 'xconq-user-display-bo(12765)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12765'}, {'name': 'DSA-354', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-354'}, {'name': '8307', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8307'}]
CVE State: PUBLISHED
Explain CVE-2003-0609
Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long LD_PRELOAD environment variable.
Affected Products: n/a
References: [{'name': '20030729 Solaris ld.so.1 buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105951760418667&w=2'}, {'name': 'sun-ldso1-ldpreload-bo(12755)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12755'}, {'name': 'oval:org.mitre.oval:def:3601', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3601'}, {'name': '8722', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8722'}, {'name': '55680', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55680'}, {'name': '20030729 Buffer Overflow in Sun Solaris Runtime Linker', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/advisory/07.29.03.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0610
Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.nai.com/us/promos/mcafee/epo_vulnerabilities.asp'}]
CVE State: PUBLISHED
Explain CVE-2003-0611
Multiple buffer overflows in xtokkaetama 1.0 allow local users to gain privileges via a long (1) -display command line argument or (2) XTOKKAETAMADIR environment variable.
Affected Products: n/a
References: [{'name': 'DSA-356', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-356'}, {'name': '8312', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8312'}]
CVE State: PUBLISHED
Explain CVE-2003-0612
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin.
Affected Products: n/a
References: [{'name': '9893', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9893'}, {'name': '1009398', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009398'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=203541'}, {'name': '20040315 Crafty Game Stack Overflow & Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/357601'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://packages.debian.org/changelogs/pool/non-free/c/crafty/crafty_19.15-1/changelog.txt'}, {'name': 'crafty-long-argument-bo(13017)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13017'}, {'name': '1009393', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009393'}, {'name': 'crafty-command-line-bo(15501)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15501'}, {'name': '9577', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/9577/'}]
CVE State: PUBLISHED
Explain CVE-2003-0613
Buffer overflow in zblast-svgalib of zblast 1.2.1 and earlier allows local users to execute arbitrary code via the high score file.
Affected Products: n/a
References: [{'name': 'DSA-369', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-369'}]
CVE State: PUBLISHED
Explain CVE-2003-0614
Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script via the searchstring parameter.
Affected Products: n/a
References: [{'name': '20030727 Gallery XSS security advisory (with fix and patch instructions)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/330676'}, {'name': 'DSA-355', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-355'}, {'name': '20030902 GLSA:  gallery (200309-06)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106252092421469&w=2'}, {'name': '20040101 Re: Gallery v1.3.3 Cross Site Scripting Vulnerabillity', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/348641/30/21790/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=82&mode=thread&order=0&thold=0'}]
CVE State: PUBLISHED
Explain CVE-2003-0615
Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.
Affected Products: n/a
References: [{'name': '20030720 CGI.pm vulnerable to Cross-site Scripting.', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=105875211018698&w=2'}, {'name': 'MDKSA-2003:084', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2003:084'}, {'name': 'DSA-371', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-371'}, {'name': '20030720 CGI.pm vulnerable to Cross-site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105880349328877&w=2'}, {'name': 'CLA-2003:713', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000713'}, {'name': 'N-155', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-155.shtml'}, {'name': 'cgi-startform-xss(12669)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12669'}, {'name': '20030806 [OpenPKG-SA-2003.036] OpenPKG Security Advisory (perl-www)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106018783704468&w=2'}, {'name': '1007234', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1007234'}, {'name': 'RHSA-2003:256', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-256.html'}, {'name': '101426', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101426-1'}, {'name': '13638', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13638'}, {'name': 'oval:org.mitre.oval:def:470', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A470'}, {'name': 'oval:org.mitre.oval:def:307', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A307'}, {'name': '8231', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8231'}, {'name': 'VU#246409', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/246409'}]
CVE State: PUBLISHED
Explain CVE-2003-0616
Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution.
Affected Products: n/a
References: [{'name': 'A073103-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a073103-1.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.nai.com/us/promos/mcafee/epo_vulnerabilities.asp'}]
CVE State: PUBLISHED
Explain CVE-2003-0617
mindi 0.58 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.
Affected Products: n/a
References: [{'name': 'DSA-362', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-362'}, {'name': '20030902 GLSA:  mindi (200309-05)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106252097421549&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0618
Multiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obtain sensitive information about files for which the user does not have appropriate permissions.
Affected Products: n/a
References: [{'name': '9543', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9543'}, {'name': 'DSA-431', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-431'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=203426'}, {'name': 'suidperl-obtain-information(15012)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15012'}]
CVE State: PUBLISHED
Explain CVE-2003-0619
Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (kernel panic) via a negative size value within XDR data of an NFSv3 procedure call.
Affected Products: n/a
References: [{'name': 'RHSA-2003:198', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-198.html'}, {'name': 'RHSA-2003:239', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-239.html'}, {'name': 'DSA-358', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-358'}, {'name': 'oval:org.mitre.oval:def:386', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A386'}, {'name': '20030729 Remote Linux Kernel < 2.4.21 DoS in XDR routine.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105950927708272&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0620
Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via (1) MANDATORY_MANPATH, MANPATH_MAP, and MANDB_MAP arguments to add_to_dirlist in manp.c, (2) a long pathname to ult_src in ult_src.c, (3) a long .so argument to test_for_include in ult_src.c, (4) a long MANPATH environment variable, or (5) a long PATH environment variable.
Affected Products: n/a
References: [{'name': '20030729 man-db[] multiple(4) vulnerabilities.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105951284512898&w=2'}, {'name': '20030730 Re: man-db[] multiple(4) vulnerabilities.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105960276803617&w=2'}, {'name': 'DSA-364', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-364'}]
CVE State: PUBLISHED
Explain CVE-2003-0621
The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument.
Affected Products: n/a
References: [{'name': '20031031 Corsaire Security Advisory: BEA Tuxedo Administration CGI multiple argument issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106762000607681&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/advisory03_38_00.jsp'}, {'name': 'bea-tuxedo-file-disclosure(13559)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13559'}, {'name': '8931', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8931'}]
CVE State: PUBLISHED
Explain CVE-2003-0622
The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service (hang) via pathname arguments that contain MS-DOS device names such as CON and AUX.
Affected Products: n/a
References: [{'name': '20031031 Corsaire Security Advisory: BEA Tuxedo Administration CGI multiple argument issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106762000607681&w=2'}, {'name': 'bea-tuxedo-device-dos(13560)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13560'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/advisory03_38_00.jsp'}, {'name': '8931', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8931'}]
CVE State: PUBLISHED
Explain CVE-2003-0623
Cross-site scripting (XSS) vulnerability in the Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to inject arbitrary web script via the INIFILE argument.
Affected Products: n/a
References: [{'name': 'bea-tuxedo-filename-xss(13561)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13561'}, {'name': '20031031 Corsaire Security Advisory: BEA Tuxedo Administration CGI multiple argument issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106762000607681&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/advisory03_38_00.jsp'}, {'name': '8931', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8931'}]
CVE State: PUBLISHED
Explain CVE-2003-0624
Cross-site scripting (XSS) vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier allows remote attackers to inject malicious web script via the person parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/SA_BEA03_36.00.jsp'}, {'name': '8938', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8938'}, {'name': 'bea-weblogic-interactivequery-xss(13568)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13568'}, {'name': '20031031 Corsaire Security Advisory: BEA WebLogic example InteractiveQuery.jsp XSS issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106761926906781&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0625
Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the server's response.
Affected Products: n/a
References: [{'name': 'DSA-360', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-360'}, {'name': '20030727 [PAPER]: Address relay fingerprinting.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105941103709264&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://developer.berlios.de/forum/forum.php?forum_id=2819'}, {'name': '8255', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8255'}]
CVE State: PUBLISHED
Explain CVE-2003-0626
psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the (1) headername or (2) footername arguments.
Affected Products: n/a
References: [{'name': '20031103 Corsaire Security Advisory: PeopleSoft PeopleBooks Search CGI multiple argument issues', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013652.html'}, {'name': 'ESB-2003.0786', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=3610'}, {'name': '20031113 Corsaire Security Advisory: PeopleSoft PeopleBooks Search CGI multiple argument issues', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0042.html'}, {'name': '9037', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9037'}, {'name': '10225', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://www.secunia.com/advisories/10225/'}, {'name': 'peoplesoft-searchcgi-directory-traversal(13754)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13754'}]
CVE State: PUBLISHED
Explain CVE-2003-0627
psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to cause a denial of service (application crash), possibly via the headername and footername arguments.
Affected Products: n/a
References: [{'name': '20031103 Corsaire Security Advisory: PeopleSoft PeopleBooks Search CGI multiple argument issues', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013652.html'}, {'name': '20031113 Corsaire Security Advisory: PeopleSoft PeopleBooks Search CGI multiple argument issues', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0042.html'}, {'name': '10225', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://www.secunia.com/advisories/10225/'}, {'name': 'peoplesoft-searchcgi-directory-traversal(13754)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13754'}, {'name': '9038', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9038'}]
CVE State: PUBLISHED
Explain CVE-2003-0628
PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include (SSI) files via an HTTP request with an invalid value.
Affected Products: n/a
References: [{'name': '20031113 Corsaire Security Advisory: PeopleSoft Gateway Administration servlet path disclosure issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106874146204158&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0629
Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScript.
Affected Products: n/a
References: [{'name': '20031113 Corsaire Security Advisory: PeopleSoft Gateway Administration servlet path disclosure issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106874146204158&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0630
Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator (atari800) before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrated with the -osa_rom argument.
Affected Products: n/a
References: [{'name': 'DSA-359', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-359'}, {'name': '20030902 GLSA:  atari800 (200309-07)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106252128221901&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0631
VMware GSX Server 2.5.1 build 4968 and earlier, and Workstation 4.0 and earlier, allows local users to gain root privileges via certain enivronment variables that are used when launching a virtual machine session.
Affected Products: n/a
References: [{'name': '20030723 VMware GSX Server 2.5.1 / Workstation 4.0 (for Linux systems)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105899875225268&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=1039'}]
CVE State: PUBLISHED
Explain CVE-2003-0632
Buffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI program (FNDWRR.exe) of Oracle E-Business Suite 11.0 and 11.5.1 through 11.5.8 may allow remote attackers to execute arbitrary code via a long URL.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/2003alert56.pdf'}, {'name': '20030724 Integrigy Security Alert - Oracle E-Business Suite FNDWRR Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105906721920776&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0633
Multiple vulnerabilities in aoljtest.jsp of Oracle Applications AOL/J Setup Test Suite in Oracle E-Business Suite 11.5.1 through 11.5.8 allow a remote attacker to obtain sensitive information without authentication, such as the GUEST user password and the application server security key.
Affected Products: n/a
References: [{'name': '8268', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8268'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/2003alert55.pdf'}, {'name': '20030724 Integrigy Security Alert - Oracle E-Business Suite AOL/J Setup Test Information Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105906689120237&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0634
Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database users in some cases, to execute arbitrary code via a long library name.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/2003alert57.pdf'}, {'name': '20030725 question about oracle advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105916455814904&w=2'}, {'name': '8267', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8267'}, {'name': 'oracle-extproc-bo(12721)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12721'}, {'name': '20030912 Update to the Oracle EXTPROC advisory', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0105.html'}, {'name': '20030725 Oracle Extproc Buffer Overflow (#NISR25072003)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=105915485303327&w=2'}, {'name': 'VU#936868', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/936868'}, {'name': '20030725 Oracle Extproc Buffer Overflow (#NISR25072003)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105914979629857&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0635
Unknown vulnerability or vulnerabilities in Novell iChain 2.2 before Support Pack 1, with unknown impact, possibly related to unauthorized access to (1) NCPIP.NLM and (2) JSTCP.NLM.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/2966435.htm'}, {'name': '20030606 NOVL-2003-2966205 - iChain 2.2 Field Patch 1a', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105492852131747&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0636
Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect URLs to malicious web sites.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/2966435.htm'}]
CVE State: PUBLISHED
Explain CVE-2003-0637
Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/2966435.htm'}]
CVE State: PUBLISHED
Explain CVE-2003-0638
Multiple buffer overflows in Novell iChain 2.1 before Field Patch 3, and iChain 2.2 before Field Patch 1a, allow attackers to cause a denial of service (ABEND) and possibly execute arbitrary code via (1) a long user name or (2) an unknown attack related to a "special script against login."
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/2966435.htm'}, {'name': '20030606 NOVL-2003-2966207 - iChain 2.1 Field Patch 3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105492847631711&w=2'}, {'name': '20030606 NOVL-2003-2966205 - iChain 2.2 Field Patch 1a', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105492852131747&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0639
Unknown vulnerability in Novell iChain 2.2 before Support Pack 1 allows users to access restricted or secure pages without authentication.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/2966435.htm'}, {'name': '20030606 NOVL-2003-2966205 - iChain 2.2 Field Patch 1a', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105492852131747&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0640
BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to overwrite usernames and passwords, which may allow Operators to gain Admin privileges.
Affected Products: n/a
References: [{'name': '9232', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://www.secunia.com/advisories/9232/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-33.jsp'}]
CVE State: PUBLISHED