Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2003-0075
Integer signedness error in the myFseek function of samplein.c for Blade encoder (BladeEnc) 0.94.2 and earlier allows remote attackers to execute arbitrary code via a negative offset value following a "fmt" wave chunk.
Affected Products: n/a
References: [{'name': 'bladeenc-myfseek-code-execution(11227)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11227.php'}, {'name': '6745', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6745'}, {'name': 'GLSA-200302-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://marc.info/?l=bugtraq&m=104446346127432&w=2'}, {'name': '20030202 Bladeenc 0.94.2 code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104428700106672&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.pivx.com/luigi/adv/blade942-adv.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0076
Unknown vulnerability in the directory parser for Direct Connect 4 Linux (dcgui) before 0.2.2 allows remote attackers to read files outside the sharelist.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://dc.ketelhot.de/pipermail/dc/2003-January/000094.html'}, {'name': 'qtdcgui-directory-download-files(11246)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11246.php'}, {'name': '20030204 GLSA:  qt-dcgui', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104437720116243&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0077
The hanterm (hanterm-xf) terminal emulator 2.0.5 and earlier, and possibly later versions, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
Affected Products: n/a
References: [{'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104612710031920&w=2'}, {'name': 'RHSA-2003:071', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-071.html'}, {'name': 'terminal-emulator-window-title(11414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11414.php'}, {'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html'}, {'name': '4917', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4917'}, {'name': 'RHSA-2003:070', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-070.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0079
The DEC UDK processing feature in the hanterm (hanterm-xf) terminal emulator before 2.0.5 allows attackers to cause a denial of service via a certain character escape sequence that causes the terminal to enter a tight loop.
Affected Products: n/a
References: [{'name': 'terminal-emulator-dec-udk(11415)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11415.php'}, {'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104612710031920&w=2'}, {'name': 'RHSA-2003:071', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-071.html'}, {'name': '4918', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4918'}, {'name': '6944', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6944'}, {'name': '20030224 Terminal Emulator Security Issues', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html'}, {'name': 'RHSA-2003:070', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-070.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0080
The iptables ruleset in Gnome-lokkit in Red Hat Linux 8.0 does not include any rules in the FORWARD chain, which could allow attackers to bypass intended access restrictions if packet forwarding is enabled.
Affected Products: n/a
References: [{'name': '7128', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7128'}, {'name': 'gnomelokkit-forward-bypass-firewall(11552)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11552'}, {'name': 'RHSA-2003:072', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-072.html'}, {'name': '4400', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4400'}]
CVE State: PUBLISHED
Explain CVE-2003-0081
Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers.
Affected Products: n/a
References: [{'name': 'RHSA-2003:077', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-077.html'}, {'name': 'SuSE-SA:2003:019', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_019_ethereal.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00008.html'}, {'name': 'GLSA-200303-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.linuxsecurity.com/advisories/gentoo_advisory-2949.html'}, {'name': 'ethereal-socks-format-string(11497)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11497'}, {'name': '20030308 Ethereal format string bug, yet still ethereal much better than windows', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/lists/fulldisclosure/2003/Mar/0080.html'}, {'name': 'CLSA-2003:627', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000627'}, {'name': 'MDKSA-2003:051', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:051'}, {'name': 'RHSA-2003:076', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-076.html'}, {'name': 'DSA-258', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-258'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/etherre.html'}, {'name': 'oval:org.mitre.oval:def:54', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A54'}, {'name': '7049', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7049'}]
CVE State: PUBLISHED
Explain CVE-2003-0082
The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka "buffer underrun").
Affected Products: n/a
References: [{'name': 'RHSA-2003:052', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-052.html'}, {'name': '20030331 GLSA: krb5 & mit-krb5 (200303-28)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/316960/30/25250/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-005-buf.txt'}, {'name': '7185', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7185'}, {'name': 'RHSA-2003:091', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-091.html'}, {'name': 'oval:org.mitre.oval:def:4430', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4430'}, {'name': 'oval:org.mitre.oval:def:244', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A244'}, {'name': 'RHSA-2003:051', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-051.html'}, {'name': 'DSA-266', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-266'}, {'name': '54042', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-54042-1'}, {'name': 'oval:org.mitre.oval:def:2536', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2536'}]
CVE State: PUBLISHED
Explain CVE-2003-0084
mod_auth_any package in Red Hat Enterprise Linux 2.1 and other operating systems does not properly escape arguments when calling other programs, which allows attackers to execute arbitrary commands via shell metacharacters.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.itlab.musc.edu/webNIS/mod_auth_any.html'}, {'name': 'RHSA-2003:113', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-113.html'}, {'name': 'RHSA-2003:114', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2003-114.html'}, {'name': 'N-090', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-090.shtml'}, {'name': '7448', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7448'}, {'name': 'modauthany-command-execution(11893)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11893'}]
CVE State: PUBLISHED
Explain CVE-2003-0085
Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code.
Affected Products: n/a
References: [{'name': '20030317 Security Bugfix for Samba - Samba 2.2.8 Released', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104792723017768&w=2'}, {'name': '20030317 GLSA:  samba (200303-11)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104792646416629&w=2'}, {'name': 'GLSA-200303-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200303-11.xml'}, {'name': '20030325 Fwd: APPLE-SA-2003-03-24 Samba, OpenSSL', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/316165/30/25370/threaded'}, {'name': 'APPLE-SA-2003-03-24', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://www.securityfocus.com/archive/1/316165/30/25370/threaded'}, {'name': 'RHSA-2003:096', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-096.html'}, {'name': 'oval:org.mitre.oval:def:552', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A552'}, {'name': '20030318 [OpenPKG-SA-2003.021] OpenPKG Security Advisory (samba)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104801012929374&w=2'}, {'name': '7106', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7106'}, {'name': 'RHSA-2003:095', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-095.html'}, {'name': 'VU#298233', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/298233'}, {'name': 'SuSE-SA:2003:016', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_016_samba.html'}, {'name': 'MDKSA-2003:032', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:032'}, {'name': 'IMNX-2003-7+-003-01', 'tags': ['vendor-advisory', 'x_refsource_IMMUNIX'], 'url': 'http://www.securityfocus.com/archive/1/317145/30/25220/threaded'}, {'name': 'DSA-262', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-262'}, {'name': '20030401 Immunix Secured OS 7+ samba update', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/317145/30/25220/threaded'}, {'name': '8303', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8303'}, {'name': '20030302-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030302-01-I'}, {'name': '8299', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8299'}]
CVE State: PUBLISHED
Explain CVE-2003-0086
The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:554', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A554'}, {'name': '20030317 GLSA:  samba (200303-11)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104792646416629&w=2'}, {'name': 'GLSA-200303-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200303-11.xml'}, {'name': '20030325 Fwd: APPLE-SA-2003-03-24 Samba, OpenSSL', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/316165/30/25370/threaded'}, {'name': 'APPLE-SA-2003-03-24', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://www.securityfocus.com/archive/1/316165/30/25370/threaded'}, {'name': 'RHSA-2003:096', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-096.html'}, {'name': '7107', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7107'}, {'name': '20030318 [OpenPKG-SA-2003.021] OpenPKG Security Advisory (samba)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104801012929374&w=2'}, {'name': 'RHSA-2003:095', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-095.html'}, {'name': 'SuSE-SA:2003:016', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_016_samba.html'}, {'name': 'MDKSA-2003:032', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:032'}, {'name': 'DSA-262', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-262'}, {'name': '8303', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8303'}, {'name': '20030302-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030302-01-I'}, {'name': '8299', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8299'}]
CVE State: PUBLISHED
Explain CVE-2003-0087
Buffer overflow in libIM library (libIM.a) for National Language Support (NLS) on AIX 4.3 through 5.2 allows local users to gain privileges via several possible attack vectors, including a long -im argument to aixterm.
Affected Products: n/a
References: [{'name': '20030212 iDEFENSE Security Advisory 02.12.03: Buffer Overflow in AIX libIM.a', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0066.html'}, {'name': '20030212 iDEFENSE Security Advisory 02.12.03: Buffer Overflow in AIX libIM.a', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104508375107938&w=2'}, {'name': 'IY40320', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY40320&apar=only'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/02.12.03.txt'}, {'name': '6840', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6840'}, {'name': '7996', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7996'}, {'name': 'IY40307', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY40307&apar=only'}, {'name': 'aix-aixterm-libim-bo(11309)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11309'}, {'name': '20030212 libIM.a buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104508833214691&w=2'}, {'name': 'IY40317', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY40317&apar=only'}]
CVE State: PUBLISHED
Explain CVE-2003-0088
TruBlueEnvironment for MacOS 10.2.3 and earlier allows local users to overwrite or create arbitrary files and gain root privileges by setting a certain environment variable that is used to write debugging information.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=61798'}, {'name': 'A021403-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a021403-1.txt'}, {'name': '6859', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6859'}, {'name': 'macos-trublueenvironment-gain-privileges(11332)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11332.php'}]
CVE State: PUBLISHED
Explain CVE-2003-0089
Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as (1) swinstall and (2) swmodify.
Affected Products: n/a
References: [{'name': '20031113 NSFOCUS SA2003-07: HP-UX Software Distributor Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0038.html'}, {'name': '8986', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8986'}, {'name': '20031113 NSFOCUS SA2003-07: HP-UX Software Distributor Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106873965001431&w=2'}, {'name': 'hp-sd-utilities-bo(13623)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13623'}, {'name': 'HPSBUX0311-293', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/6030'}, {'name': 'oval:org.mitre.oval:def:5466', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5466'}]
CVE State: PUBLISHED
Explain CVE-2003-0091
Stack-based buffer overflow in the bsd_queue() function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:4383', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4383'}, {'name': '52443', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-52443-1'}, {'name': '20030331 NSFOCUS SA2003-02: Solaris lpq Stack Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0162.html'}, {'name': '8713', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8713'}, {'name': 'N-068', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-068.shtml'}, {'name': '20030331 NSFOCUS SA2003-02: Solaris lpq Stack Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/316957/30/25250/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nsfocus.com/english/homepage/sa2003-02.htm'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/0304-advisories/sa2003-02.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0092
Heap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to gain root privileges via a long HOME environment variable.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:1905', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1905'}, {'name': '7240', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7240'}, {'name': '20030331 NSFOCUS SA2003-03: Solaris dtsession Heap Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/316948/30/25250/threaded'}, {'name': '52388', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-52388-1'}, {'name': '20030331 NSFOCUS SA2003-03: Solaris dtsession Heap Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0163.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0093
The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service (crash) via an invalid RADIUS packet with a header length field of 0, which causes tcpdump to generate data within an infinite loop.
Affected Products: n/a
References: [{'name': 'DSA-261', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-261'}, {'name': 'RHSA-2003:033', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-033.html'}, {'name': 'MDKSA-2003:027', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=81585'}, {'name': 'RHSA-2003:214', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-214.html'}, {'name': 'tcpdump-radius-decoder-dos(11324)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11324'}, {'name': 'RHSA-2003:032', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-032.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0094
A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /dev/random, which causes mcookie to use an entropy source that is more predictable than expected, which may make it easier for certain types of attacks to succeed.
Affected Products: n/a
References: [{'name': 'MDKSA-2003:016', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:016'}, {'name': 'utillinux-mcookie-cookie-predictable(11318)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11318'}, {'name': '6855', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6855'}]
CVE State: PUBLISHED
Explain CVE-2003-0095
Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own authentication, as demonstrated using LOADPSP.
Affected Products: n/a
References: [{'name': 'CA-2003-05', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2003-05.html'}, {'name': 'N-046', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-046.shtml'}, {'name': '6849', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6849'}, {'name': '20030217 Oracle unauthenticated remote system compromise (#NISR16022003a)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104549693426042&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/2003alert51.pdf'}, {'name': 'oracle-username-bo(11328)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11328.php'}, {'name': '6319', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6319'}, {'name': 'VU#953746', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/953746'}]
CVE State: PUBLISHED
Explain CVE-2003-0097
Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possibly execute PHP code, by bypassing the CGI force redirect settings (cgi.force_redirect or --enable-force-cgi-redirect).
Affected Products: n/a
References: [{'name': 'GLSA-200302-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://marc.info/?l=bugtraq&m=104567042700840&w=2'}, {'name': 'GLSA-200302-09.1', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://marc.info/?l=bugtraq&m=104567137502557&w=2'}, {'name': 'php-cgi-sapi-access(11343)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11343.php'}, {'name': '20030217 PHP Security Advisory: CGI vulnerability in PHP version 4.3.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104550977011668&w=2'}, {'name': '6875', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6875'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.slackware.com/changelog/current.php?cpu=i386'}]
CVE State: PUBLISHED
Explain CVE-2003-0098
Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=137900'}, {'name': '1006108', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1006108'}, {'name': 'MDKSA-2003:018', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:018'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hsj.shadowpenguin.org/misc/apcupsd_exp.txt'}, {'name': 'apcupsd-logevent-format-string(11334)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11334.php'}, {'name': '7200', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7200'}, {'name': 'SuSE-SA:2003:022', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_022_apcupsd.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/apcupsd/apcupsd/src/apcnisd.c.diff?r1=1.5&r2=1.6'}, {'name': 'DSA-277', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-277'}, {'name': '6828', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6828'}, {'name': 'CSSA-2003-015.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-015.0.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0099
Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers to cause a denial of service or execute arbitrary code, related to usage of the vsprintf function.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=137900'}, {'name': '1006108', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1006108'}, {'name': 'MDKSA-2003:018', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:018'}, {'name': 'apcupsd-vsprintf-multiple-bo(11491)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11491.php'}, {'name': '7200', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7200'}, {'name': 'SuSE-SA:2003:022', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_022_apcupsd.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=137892'}, {'name': 'DSA-277', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-277'}, {'name': 'CSSA-2003-015.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-015.0.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0100
Buffer overflow in Cisco IOS 11.2.x to 12.0.x allows remote attackers to cause a denial of service and possibly execute commands via a large number of OSPF neighbor announcements.
Affected Products: n/a
References: [{'name': '20030221 Re: Cisco IOS OSPF exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104587206702715&w=2'}, {'name': 'cisco-ios-ospf-bo(11373)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11373.php'}, {'name': '20030220 Cisco IOS OSPF exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104576100719090&w=2'}, {'name': '6895', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6895'}]
CVE State: PUBLISHED
Explain CVE-2003-0101
miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.
Affected Products: n/a
References: [{'name': 'DSA-319', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-319'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.linuxsecurity.com/advisories/gentoo_advisory-2886.html'}, {'name': '20030224 GLSA:  usermin (200302-14)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104610336226274&w=2'}, {'name': 'N-058', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-058.shtml'}, {'name': '8163', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8163'}, {'name': 'MDKSA-2003:025', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:025'}, {'name': 'HPSBUX0303-250', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2003-q1/0063.html'}, {'name': '8115', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8115'}, {'name': '1006160', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006160'}, {'name': '20030224 [SNS Advisory No.62] Webmin/Usermin Session ID Spoofing Vulnerability "Episode 2"', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104610300325629&w=2'}, {'name': 'ESA-20030225-006', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://archives.neohapsis.com/archives/linux/engarde/2003-q1/0008.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://marc.info/?l=webmin-announce&m=104587858408101&w=2'}, {'name': '20030224 Webmin 1.050 - 1.060 remote exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104610245624895&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.lac.co.jp/security/english/snsadv_e/62_e.html'}, {'name': '20030602-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030602-01-I'}, {'name': 'webmin-usermin-root-access(11390)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11390.php'}, {'name': '6915', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6915'}]
CVE State: PUBLISHED
Explain CVE-2003-0102
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/03.04.03.txt'}, {'name': 'file-afctr-read-bo(11469)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11469'}, {'name': 'NetBSD-SA2003-003', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-003.txt.asc'}, {'name': 'RHSA-2003:087', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-087.html'}, {'name': 'SuSE-SA:2003:017', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_017_file.html'}, {'name': '7008', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7008'}, {'name': '20030304 iDEFENSE Security Advisory 03.04.03: Locally Exploitable Buffer Overflow in file(1)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104680706201721&w=2'}, {'name': 'IMNX-2003-7+-012-01', 'tags': ['vendor-advisory', 'x_refsource_IMMUNIX'], 'url': 'http://lwn.net/Alerts/34908/'}, {'name': 'RHSA-2003:086', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-086.html'}, {'name': 'DSA-260', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-260'}, {'name': 'VU#611865', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/611865'}, {'name': 'MDKSA-2003:030', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:030'}]
CVE State: PUBLISHED
Explain CVE-2003-0103
Format string vulnerability in Nokia 6210 handset allows remote attackers to cause a denial of service (crash, lockup, or restart) via a Multi-Part vCard with fields containing a large number of format string specifiers.
Affected Products: n/a
References: [{'name': 'nokia-6210-vcard-dos(11421)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11421.php'}, {'name': '6952', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6952'}]
CVE State: PUBLISHED
Explain CVE-2003-0104
Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite arbitrary files via the SchedulerTransfer servlet.
Affected Products: n/a
References: [{'name': '20030310 PeopleSoft PeopleTools Remote Command Execution Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21999'}, {'name': 'peoplesoft-schedulertransfer-create-files(10962)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10962.php'}, {'name': '7053', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7053'}]
CVE State: PUBLISHED
Explain CVE-2003-0105
ServerMask 2.2 and earlier does not obfuscate (1) ETag, (2) HTTP Status Message, or (3) Allow HTTP responses, which could tell remote attackers that the web server is an IIS server.
Affected Products: n/a
References: [{'name': 'servermask-header-obtain-info(16947)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16947'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.corsaire.com/advisories/c030224-001.txt'}, {'name': '20040810 Corsaire Security Advisory - Port80 Software ServerMask inconsistencies', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109215441332682&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0106
The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded with escapes, Unicode, or UTF-8.
Affected Products: n/a
References: [{'name': '20030326 Corsaire Security Advisory - Symantec Enterprise Firewall (SEF) H TTP URL pattern evasion issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104869513822233&w=2'}, {'name': '20030326 Corsaire Security Advisory - Symantec Enterprise Firewall (SEF) H TTP URL pattern evasion issue', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0152.html'}, {'name': '20030326 Corsaire Security Advisory - Symantec Enterprise Firewall (SEF) H TTP URL pattern evasion issue', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=104868285106289&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://service1.symantec.com/SUPPORT/ent-gate.nsf/docid/2003032507434754'}, {'name': '7196', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7196'}]
CVE State: PUBLISHED
Explain CVE-2003-0107
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00038.html'}, {'name': 'JVN#78689801', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN78689801/index.html'}, {'name': 'JVNDB-2015-000066', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000066.html'}, {'name': 'MDKSA-2003:033', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:033'}, {'name': 'NetBSD-SA2003-004', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-004.txt.asc'}, {'name': 'RHSA-2003:081', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-081.html'}, {'name': 'RHSA-2003:079', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-079.html'}, {'name': 'GLSA-200303-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://marc.info/?l=bugtraq&m=104887247624907&w=2'}, {'name': 'CSSA-2003-011.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-011.0.txt'}, {'name': 'VU#142121', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/142121'}, {'name': '20030224 Re: buffer overrun in zlib 1.1.4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104610536129508&w=2'}, {'name': '57405', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F57405'}, {'name': '6599', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6599'}, {'name': '20030225 [sorcerer-spells] ZLIB-SORCERER2003-02-25', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104620610427210&w=2'}, {'name': '20030222 buffer overrun in zlib 1.1.4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/312869'}, {'name': 'CLSA-2003:619', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000619'}, {'name': '6913', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6913'}, {'name': 'zlib-gzprintf-bo(11381)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11381.php'}, {'name': '20030223 poc zlib sploit just for fun :)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104610337726297&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0108
isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/02.27.03.txt'}, {'name': '20030304 [OpenPKG-SA-2003.014] OpenPKG Security Advisory (tcpdump)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104678787109030&w=2'}, {'name': 'MDKSA-2003:027', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027'}, {'name': '6974', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6974'}, {'name': 'RHSA-2003:214', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-214.html'}, {'name': 'DSA-255', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-255'}, {'name': '20030227 iDEFENSE Security Advisory 02.27.03: TCPDUMP Denial of Service Vulnerability in ISAKMP Packet Parsin', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104637420104189&w=2'}, {'name': 'RHSA-2003:085', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-085.html'}, {'name': 'RHSA-2003:032', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-032.html'}, {'name': 'tcpdump-isakmp-dos(11434)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11434.php'}, {'name': 'CLA-2003:629', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000629'}, {'name': 'SuSE-SA:2003:0015', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_015_tcpdump.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0109
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.
Affected Products: n/a
References: [{'name': '20030326 WebDAV exploit: using wide character decoder scheme', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104869293619064&w=2'}, {'name': '20030321 New attack vectors and a vulnerability dissection of MS03-007', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104826476427372&w=2'}, {'name': 'oval:org.mitre.oval:def:109', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A109'}, {'name': '20030325 IIS 5.0 WebDAV -Proof of concept-. Fully documented.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104861839130254&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/papers/ms03-007-ntdll.pdf'}, {'name': 'http-webdav-long-request(11533)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11533.php'}, {'name': 'Q815021', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ815021'}, {'name': '20030317 Microsoft IIS WebDAV Remote Compromise Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=22029'}, {'name': '20030328 Fate Research Labs Presents: Analysis of the NTDLL.DLL Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104887148323552&w=2'}, {'name': '7116', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7116'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://microsoft.com/downloads/details.aspx?FamilyId=C9A38D45-5145-4844-B62E-C69D32AC929B&displaylang=en'}, {'name': '20030708 WDAV exploit without netcat and with pretty magic number', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105768156625699&w=2'}, {'name': '20030321 New attack vectors and a vulnerability dissection of MS03-007', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=104826785731151&w=2'}, {'name': 'MS03-007', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-007'}, {'name': 'VU#117394', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/117394'}, {'name': 'CA-2003-09', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2003-09.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0110
The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Server 2000 allow remote attackers to cause a denial of service (CPU consumption or packet storm) via a spoofed, malformed packet to UDP port 1745.
Affected Products: n/a
References: [{'name': '20030409 iDEFENSE Security Advisory 04.09.03: Denial of Service in Microsoft Proxy Server and Internet Security and Acceleration Server 2000', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104994487012027&w=2'}, {'name': 'oval:org.mitre.oval:def:406', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A406'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/04.09.03.txt'}, {'name': 'MS03-012', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-012'}]
CVE State: PUBLISHED