Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2003-0268
SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which reveals the path in an error message.
Affected Products: n/a
References: [{'name': '20030507 Multiple Vulnerabilities in SLWebmail', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105232436210273&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/slwebmail-vulns.txt'}, {'name': '20030507 Multiple Vulnerabilities in SLWebmail', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=105233363721919&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0269
Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable.
Affected Products: n/a
References: [{'name': '20030506 youbin local root exploit + advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105223947528794&w=2'}, {'name': 'youbin-home-bo(11949)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11949'}, {'name': '20030506 youbin local root exploit + advisory', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0053.html'}, {'name': '20030506 youbin local root exploit + advisory', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-May/004892.html'}, {'name': '7503', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7503'}]
CVE State: PUBLISHED
Explain CVE-2003-0270
The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet or non-WEP connections.
Affected Products: n/a
References: [{'name': 'airport-auth-credentials-disclosure(11980)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11980'}, {'name': '8773', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8773'}, {'name': '1006742', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1006742'}, {'name': '7554', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7554'}, {'name': 'A051203-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a051203-1.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0271
Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://security.nnov.ru/search/document.asp?docid=4309'}, {'name': '20030331 Personal FTP Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/316958'}, {'name': '20030508 Remote Stack Overflow exploit for Personal FTPD', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105240469318622&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0272
admin.php in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cookie to an "adminok" value.
Affected Products: n/a
References: [{'name': '20030508 miniPortail (PHP) : Admin Access', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105240907024660&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.frog-man.org/tutos/miniPortail.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0273
Cross-site scripting (XSS) vulnerability in the web interface for Request Tracker (RT) 1.0 through 1.0.7 allows remote attackers to execute script via message bodies.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.fsck.com/pipermail/rt-announce/2003-May/000071.html'}, {'name': '20030508 Fw: [rt-users] [rt-announce] RT 1.0.7 vulnerable to Cross Site Scripting attacks', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105240947225275&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0274
Buffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute arbitrary code via a long ULISTPROC_UMASK value.
Affected Products: n/a
References: [{'name': '20030508 SRT2003-05-08-1137 - ListProc mailing list ULISTPROC_UMASK overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105241224228693&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0275
SSI.php in YaBB SE 1.5.2 allows remote attackers to execute arbitrary PHP code by modifying the sourcedir parameter to reference a URL on a remote web server that contains the code.
Affected Products: n/a
References: [{'name': '20030509 II-Labs Advisory: Remote code execution in YaBBse 1.5.2 (php version)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105249980809988&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0276
Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GET request with a large number of / characters.
Affected Products: n/a
References: [{'name': 'pi3web-get-request-bo(11889)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11889'}, {'name': '7555', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7555'}, {'name': '20030512 Unix Version of the Pi3web DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105275789410250&w=2'}, {'name': '20030428 Pi3Web 2.0.1 DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105155818012718&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0277
Directory traversal vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the file parameter.
Affected Products: n/a
References: [{'name': 'happymall-dotdot-directory-traversal(11987)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11987'}, {'name': '7559', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7559'}, {'name': '20030512 One more flaw in Happymall', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105276130814262&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0278
Cross-site scripting (XSS) vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to insert arbitrary web script via the file parameter.
Affected Products: n/a
References: [{'name': '7557', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7557'}, {'name': 'happymall-normalhtml-xss(11988)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11988'}, {'name': '20030512 One more flaw in Happymall', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105276130814262&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0279
Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5 allows remote attackers to steal sensitive information via numeric fields, as demonstrated using (1) the viewlink function and cid parameter, or (2) index.php.
Affected Products: n/a
References: [{'name': '20030512 Lot of SQL injection on PHP-Nuke 6.5 (secure weblog!)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105276019312980&w=2'}, {'name': '7588', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7588'}, {'name': '7558', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7558'}, {'name': '20030513 More and More SQL injection on PHP-Nuke 6.5.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-05/0147.html'}, {'name': 'phpnuke-web-sql-injection(11984)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11984'}]
CVE State: PUBLISHED
Explain CVE-2003-0280
Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands.
Affected Products: n/a
References: [{'name': '7548', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7548'}, {'name': '7547', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7547'}, {'name': '20030510 Multiple Buffer Overflow Vulnerabilities Found in CMailServer 4.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105258772101349&w=2'}, {'name': '20030510 Multiple Buffer Overflow Vulnerabilities Found in CMailServer 4.0', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0062.html'}, {'name': 'cmailserver-smtp-bo(11975)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11975'}]
CVE State: PUBLISHED
Explain CVE-2003-0281
Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_inet_server, (2) gds_lock_mgr, or (3) gds_drop.
Affected Products: n/a
References: [{'name': 'firebird-interbase-bo(11977)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11977'}, {'name': 'GLSA-200405-18', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-18.xml'}, {'name': '20020617 Interbase 6.0 malloc() issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/lists/bugtraq/2002/Jun/0212.html'}, {'name': '20030509 Firebird Local exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105259012802997&w=2'}, {'name': '7546', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7546'}, {'name': '8758', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8758'}]
CVE State: PUBLISHED
Explain CVE-2003-0282
Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence.
Affected Products: n/a
References: [{'name': '20030509 unzip directory traversal revisited', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105259038503175&w=2'}, {'name': 'CLA-2003:672', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000672'}, {'name': 'unzip-dotdot-directory-traversal(12004)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12004'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.info-zip.org/FAQ.html'}, {'name': 'RHSA-2003:199', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-199.html'}, {'name': 'MDKSA-2003:073', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:073'}, {'name': 'TLSA-2003-42', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/security/TLSA-2003-42.txt'}, {'name': 'oval:org.mitre.oval:def:619', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A619'}, {'name': 'N-111', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-111.shtml'}, {'name': 'CSSA-2003-031.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-031.0.txt'}, {'name': '7550', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7550'}, {'name': 'CSSA-2003-031.0', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-031.0.txt'}, {'name': '20030710 [OpenPKG-SA-2003.033] OpenPKG Security Advisory (infozip)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105786446329347&w=2'}, {'name': 'RHSA-2003:200', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-200.html'}, {'name': 'IMNX-2003-7+-017-01', 'tags': ['vendor-advisory', 'x_refsource_IMMUNIX'], 'url': 'http://download.immunix.org/ImmunixOS/7+/Updates/errata/IMNX-2003-7+-017-01'}, {'name': 'DSA-344', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-344'}]
CVE State: PUBLISHED
Explain CVE-2003-0283
Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject arbitrary web script and HTML tags via a message with a "<<" before a tag name in the (1) subject, (2) author's name, or (3) author's e-mail.
Affected Products: n/a
References: [{'name': 'phorum-message-html-injection(11974)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11974'}, {'name': "20030509 Re: A Phorum's bug...", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105251421925394&w=2'}, {'name': '7545', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7545'}, {'name': "20030509 A Phorum's bug...", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105251043821533&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0284
Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the Plug-ins folder that spread to other PDF documents, as demonstrated by the W32.Yourde virus.
Affected Products: n/a
References: [{'name': 'VU#184820', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/184820'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/downloads/detail.jsp?ftpID=2121'}]
CVE State: PUBLISHED
Explain CVE-2003-0285
IBM AIX 5.2 and earlier distributes Sendmail with a configuration file (sendmail.cf) with the (1) promiscuous_relay, (2) accept_unresolvable_domains, and (3) accept_unqualified_senders features enabled, which allows Sendmail to be used as an open mail relay for sending spam e-mail.
Affected Products: n/a
References: [{'name': 'aix-sendmail-mail-relay(11993)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11993'}, {'name': '20030513 AIX sendmail open relay', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105284689228961&w=2'}, {'name': '7580', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7580'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.sdsc.edu/advisories/2003.05.13-AIX-sendmail.txt'}, {'name': 'VU#814617', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/814617'}]
CVE State: PUBLISHED
Explain CVE-2003-0286
SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.
Affected Products: n/a
References: [{'name': 'snitz-register-sql-injection(11981)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11981'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/0305-exploits/snitz_exec.txt'}, {'name': '20030513 Snitz Forum 3.3.03 Remote Command Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105277599131134&w=2'}, {'name': '35733', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35733'}, {'name': '20030512 Snitz Forum 3.3.03 Remote Command Execution', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0067.html'}, {'name': '56166', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/56166'}, {'name': '35764', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/35764'}, {'name': '7549', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7549'}]
CVE State: PUBLISHED
Explain CVE-2003-0287
Cross-site scripting (XSS) vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via the Name textbox, possibly when the "Allow HTML in comments?" option is enabled.
Affected Products: n/a
References: [{'name': '20030513 Re: CSS found in Movable Type -- Nope', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105284589927655&w=2'}, {'name': 'movable-type-comment-xss(12003)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12003'}, {'name': '20030512 Re: CSS found in Movable Type', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105277690132079&w=2'}, {'name': '7560', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7560'}, {'name': '20030512 CSS found in Movable Type', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105276879622636&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0288
Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.lac.co.jp/security/english/snsadv_e/64_e.html'}, {'name': '20030513 [SNS Advisory No.64] IP Messenger for Win Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105283843417610&w=2'}, {'name': '7566', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7566'}, {'name': 'ip-messenger-filename-bo(11986)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11986'}]
CVE State: PUBLISHED
Explain CVE-2003-0289
Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.
Affected Products: n/a
References: [{'name': '200305-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://forums.gentoo.org/viewtopic.php?t=54904'}, {'name': '7565', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7565'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.berlios.de/pub/cdrecord/alpha/cdrtools-2.01a14.tar.gz'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/exploits/5ZP0C2AAAC.html'}, {'name': '20030513 cdrtools2.0 Format String Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105285564307225&w=2'}, {'name': 'MDKSA-2003:058', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:058'}, {'name': '20030513 Cdrecord_local_root_exploit.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105286031812533&w=2'}, {'name': 'cdrtools-scsiopen-format-string(12007)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12007'}]
CVE State: PUBLISHED
Explain CVE-2003-0290
Memory leak in eServ 2.9x allows remote attackers to cause a denial of service (memory exhaustion) via a large number of connections, whose memory is not freed when the connection is terminated.
Affected Products: n/a
References: [{'name': 'eserv-multiple-connections-dos(11973)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11973'}, {'name': '20030511 eServ Memory Leak Enables Denial of Service Attacks', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0064.html'}, {'name': '7552', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7552'}, {'name': '20030513 eServ Memory Leak Solution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105284631428187&w=2'}, {'name': '20030511 eServ Memory Leak Enables Denial of Service Attacks', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105284630228137&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0291
3com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP responses, which allows remote attackers to identify the contents of previous HTTP requests by sniffing DHCP packets.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://nautopia.coolfreepages.com/vulnerabilidades/3com812_dhcp_leak.htm'}, {'name': '20030515 RE : Memory leak in 3COM DSL routers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105301488426951&w=2'}, {'name': '7592', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7592'}, {'name': '3com-officeconnect-memory-leak(11999)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11999'}, {'name': '20030514 Memory leak in 3COM 812 DSL routers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105292451702516&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0292
Cross-site scripting (XSS) vulnerability in Inktomi Traffic-Server 5.5.1 allows remote attackers to insert arbitrary web script or HTML into an error page that appears to come from the domain that the client is visiting, aka "Man-in-the-Middle" XSS.
Affected Products: n/a
References: [{'name': '20030514 Inktomi Traffic-Server XSS: man-in-the-middle XSS !', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105292750807005&w=2'}, {'name': '7596', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7596'}]
CVE State: PUBLISHED
Explain CVE-2003-0293
PalmOS allows remote attackers to cause a denial of service (CPU consumption) via a flood of ICMP echo request (ping) packets.
Affected Products: n/a
References: [{'name': '20030514 PalmOS ICMP flood DoS.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105293128612131&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0294
autohtml.php in php-proxima 6.0 and earlier allows remote attackers to read arbitrary files via the name parameter in a modload operation.
Affected Products: n/a
References: [{'name': '20030514 php-proxima Remote File Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105293834421549&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0295
Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capability.
Affected Products: n/a
References: [{'name': '20030514 Re: VBulletin Preview Message - XSS Vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105293890422210&w=2'}, {'name': '20030514 VBulletin Preview Message - XSS Vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105292832607981&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0296
The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.
Affected Products: n/a
References: [{'name': '20030514 Buffer overflows in multiple IMAP clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105294024124163&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0297
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
Affected Products: n/a
References: [{'name': 'FLSA:184074', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/430302/100/0/threaded'}, {'name': 'RHSA-2005:114', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-114.html'}, {'name': 'RHSA-2005:015', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-015.html'}, {'name': '20030514 Buffer overflows in multiple IMAP clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105294024124163&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0298
The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large (1) literal and possibly (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
Affected Products: n/a
References: [{'name': '20030514 Buffer overflows in multiple IMAP clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105294024124163&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0299
The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large mailbox size values that cause either integer signedness errors or integer overflow errors.
Affected Products: n/a
References: [{'name': '20030514 Buffer overflows in multiple IMAP clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105294024124163&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0300
The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.
Affected Products: n/a
References: [{'name': '20030514 Buffer overflows in multiple IMAP clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105294024124163&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0301
The IMAP Client for Outlook Express 6.00.2800.1106 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.
Affected Products: n/a
References: [{'name': '20030514 Buffer overflows in multiple IMAP clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105294024124163&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0302
The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.
Affected Products: n/a
References: [{'name': '20030514 Buffer overflows in multiple IMAP clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105294024124163&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0303
SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter.
Affected Products: n/a
References: [{'name': '7609', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7609'}, {'name': '20030515 OneOrZero Security Problems (PHP)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0070.html'}, {'name': '20030515 OneOrZero Security Problems (PHP)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105302025601231&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0304
one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script.
Affected Products: n/a
References: [{'name': '20030515 OneOrZero Security Problems (PHP)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0070.html'}, {'name': '20030515 OneOrZero Security Problems (PHP)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105302025601231&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0305
The Service Assurance Agent (SAA) in Cisco IOS 12.0 through 12.2, aka Response Time Reporter (RTR), allows remote attackers to cause a denial of service (crash) via malformed RTR packets to port 1967.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:5608', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5608'}, {'name': '20030515 Cisco Security Advisory: Cisco IOS Software Processing of SAA Packets', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20030515-saa.shtml'}]
CVE State: PUBLISHED
Explain CVE-2003-0306
Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.ini file with a long .ShellClassInfo parameter.
Affected Products: n/a
References: [{'name': 'MS03-027', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-027'}, {'name': '20030511 Detailed analysis: Buffer overflow in Explorer.exe on Windows XP SP1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105284486526310&w=2'}, {'name': 'oval:org.mitre.oval:def:3095', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3095'}, {'name': '20030515 Re[2]: EXPLOIT: Buffer overflow in Explorer.exe on Windows XP SP1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105301349925036&w=2'}, {'name': '20030507 Buffer overflow in Explorer.exe', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=105241032526289&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0307
Poster version.two allows remote authenticated users to gain administrative privileges by appending the "|" field separator and an "admin" value into the email address field.
Affected Products: n/a
References: [{'name': "20030514 [VULNERABILITY] PHP 'poster version.two'", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105295155004969&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0308
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.
Affected Products: n/a
References: [{'name': 'DSA-305', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-305'}, {'name': '[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2008/10/30/2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev.gentoo.org/~rbu/security/debiantemp/sendmail-base'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/496408'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.gentoo.org/show_bug.cgi?id=235770'}]
CVE State: PUBLISHED
Explain CVE-2003-0309
Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which eventually cause Internet Explorer to execute the program, as demonstrated using a large number of FRAME or IFRAME tags, aka the "File Download Dialog Vulnerability."
Affected Products: n/a
References: [{'name': '20030508 Flooding Internet Explorer 6.0.2800 (6.x?) security zones ! [CRITICAL]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105249399103214&w=2'}, {'name': 'VU#251788', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/251788'}, {'name': 'oval:org.mitre.oval:def:948', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A948'}, {'name': '8807', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8807'}, {'name': '20030513 Flooding Internet Explorer 6.0.2800 (6.x?) security zones  ! - UPDATED', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=105294162726096&w=2'}, {'name': '7539', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7539'}, {'name': '20030513 Flooding Internet Explorer 6.0.2800 (6.x?) security zones  ! - UPDATED', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105294081325040&w=2'}, {'name': 'MS03-020', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-020'}, {'name': 'ie-frame-restrictions-bypass(12019)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12019'}]
CVE State: PUBLISHED
Explain CVE-2003-0310
Cross-site scripting (XSS) vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script.
Affected Products: n/a
References: [{'name': '20030516 EzPublish Directory XSS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105310013606680&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0312
Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.
Affected Products: n/a
References: [{'name': '20030516 Snowblind Web Server: multiple issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105311719128173&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0313
Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to list arbitrary directory contents via a ... (triple dot) in an HTTP request.
Affected Products: n/a
References: [{'name': '20030516 Snowblind Web Server: multiple issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105311719128173&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0314
Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) via a URL that ends in a "</" sequence.
Affected Products: n/a
References: [{'name': '20030516 Snowblind Web Server: multiple issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105311719128173&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0315
Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP request, which may trigger a buffer overflow.
Affected Products: n/a
References: [{'name': '20030516 Snowblind Web Server: multiple issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105311719128173&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0316
Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for various protocols, including an open relay for SMTP, which allows it to be abused by spammers.
Affected Products: n/a
References: [{'name': '20030516 Venturi Client 2.1 confirmed as open relay [Verizon Wireless Mobile Office]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-05/0188.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.venturiwireless.com/tech_support/Q_and_A/Q_A_09.htm'}]
CVE State: PUBLISHED
Explain CVE-2003-0317
iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded characters.
Affected Products: n/a
References: [{'name': '20030522 Authentication Bypass in iisPROTECT', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=25'}]
CVE State: PUBLISHED
Explain CVE-2003-0318
Cross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier allows remote attackers to insert arbitrary web script via the year parameter.
Affected Products: n/a
References: [{'name': '20030517 PHP-Nuke code injection in Yearly Stats at Statistics module', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105319538308834&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0319
Buffer overflow in the IMAP server (IMAPMax) for SmartMax MailMax 5.0.10.8 and earlier allows remote authenticated users to execute arbitrary code via a long SELECT command.
Affected Products: n/a
References: [{'name': '20030517 Buffer overflow vulnerability found in MailMax version 5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105319299407291&w=2'}, {'name': '20030517 Buffer overflow vulnerability found in MailMax version 5', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0072.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0320
header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms_user_admin parameter to "1" and modifying the admin_root parameter to point to a URL that contains a Trojan horse header.inc.php script.
Affected Products: n/a
References: [{'name': '20030517 Remote code execution in ttCMS <=v2.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105320172212990&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0321
Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions (1) send_ctcp, (2) cannot_join_channel, (3) cluster, (4) BX_compress_modes, (5) handle_oper_vision, and (6) ban_it.
Affected Products: n/a
References: [{'name': '7096', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7096'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.debian.org/pool/updates/main/i/ircii-pana/ircii-pana_1.0-0c16-2.1.diff.gz'}, {'name': '7097', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7097'}, {'name': 'CLA-2003:655', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000655'}, {'name': '20030324 GLSA:  bitchx (200303-21)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104852615211913&w=2'}, {'name': 'DSA-306', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-306'}, {'name': '20030313 Buffer overflows in ircII-based clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104766521328322&w=2'}, {'name': '7100', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7100'}, {'name': '7099', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7099'}]
CVE State: PUBLISHED
Explain CVE-2003-0322
Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service (crash).
Affected Products: n/a
References: [{'name': 'DSA-306', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-306'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.debian.org/pool/updates/main/i/ircii-pana/ircii-pana_1.0-0c16-2.1.diff.gz'}]
CVE State: PUBLISHED
Explain CVE-2003-0323
Multiple buffer overflows in ircII 20020912 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via responses that are not properly fed to the my_strcat function by (1) ctcp_buffer, (2) cannot_join_channel, (3) status_make_printable for Statusbar drawing, (4) create_server_list, and possibly other functions.
Affected Products: n/a
References: [{'name': 'DSA-298', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-298'}, {'name': '7098', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7098'}, {'name': 'DSA-291', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-291'}, {'name': '20030313 Buffer overflows in ircII-based clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104766521328322&w=2'}, {'name': '20030319 [OpenPKG-SA-2003.024] OpenPKG Security Advisory (ircii)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104808915402926&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0324
Buffer overflows in EPIC IRC Client (EPIC4) 1.0.1 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long replies that are not properly handled by the (1) userhost_cmd_returned function, or (2) Statusbar capability.
Affected Products: n/a
References: [{'name': 'DSA-287', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-287'}, {'name': '7091', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7091'}, {'name': '20030313 Buffer overflows in ircII-based clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104766521328322&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0325
Buffer overflow in Maelstrom 3.0.6, 3.0.5, and earlier allows local users to execute arbitrary code via a long -server command line argument.
Affected Products: n/a
References: [{'name': '20030520 Maelstrom Local Buffer Overflow Exploit, FreeBSD 4.8 edition', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105346309123217&w=2'}, {'name': '20030518 Maelstrom Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105337792703887&w=2'}, {'name': '20030519 Maelstrom exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105344501331344&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0326
Integer overflow in parse_decode_path() of slocate may allow attackers to execute arbitrary code via a LOCATE_PATH with a large number of ":" (colon) characters, whose count is used in a call to malloc.
Affected Products: n/a
References: [{'name': '20030519 bazarr slocate', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105337692202626&w=2'}, {'name': '7629', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7629'}]
CVE State: PUBLISHED
Explain CVE-2003-0327
Sybase Adaptive Server Enterprise (ASE) 12.5 allows remote attackers to cause a denial of service (hang) via a remote password array with an invalid length, which triggers a heap-based buffer overflow.
Affected Products: n/a
References: [{'name': 'sybase-passwordarray-bo(13800)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13800'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/advisories/R7-0016.html'}, {'name': '20031120 R7-0016: Sybase ASE 12.5 Remote Password Array Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106936096103805&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0328
EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation.
Affected Products: n/a
References: [{'name': 'DSA-399', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-399'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.prbh.org/pub/epic/patches/alloca_underrun-patch-1'}, {'name': 'DSA-306', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-306'}, {'name': 'RHSA-2003:342', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-342.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0329
CesarFTP 0.99g stores user names and passwords in plaintext in the settings.ini file, which could allow local users to gain privileges.
Affected Products: n/a
References: [{'name': '20030520 Plaintext Password in Settings.ini of CesarFTP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105344578100315&w=2'}, {'name': '20030520 Plaintext Password in Settings.ini of CesarFTP', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0074.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0330
Buffer overflow in unknown versions of Maelstrom allows local users to execute arbitrary code via a long -player command line argument.
Affected Products: n/a
References: [{'name': '1008832', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1008832'}, {'name': '20030520 Maelstrom Local Buffer Overflow Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105344891005369&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0331
SQL injection vulnerability in ttForum allows remote attackers to execute arbitrary SQL and gain ttForum Administrator privileges via the Ignorelist-Textfield argument in the Preferences page.
Affected Products: n/a
References: [{'name': '20030520 More vulnerabilities in ttForum/ttCMS -> SQL injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105345273210334&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0332
The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a security check, which allows remote attackers to bypass authentication via a filename with a .ats extension instead of a .hts extension.
Affected Products: n/a
References: [{'name': '20030520 BadBlue Remote Administrative Interface Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105346382524169&w=2'}, {'name': '20030520 BadBlue Remote Administrative Interface Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0075.html'}]
CVE State: PUBLISHED