Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2003-0154
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/attachment.cgi?id=95985&action=view'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/attachment.cgi?id=95950&action=view'}, {'name': '5516', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5516'}, {'name': 'bonsai-error-message-xss(9920)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9920.php'}, {'name': '20020819 Advisory: Bonsai XSS and Physical Path Revealing Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102980129101054&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=163573'}, {'name': 'DSA-265', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-265'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=146244'}]
CVE State: PUBLISHED
Explain CVE-2003-0155
bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.
Affected Products: n/a
References: [{'name': '7163', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7163'}, {'name': 'DSA-265', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-265'}]
CVE State: PUBLISHED
Explain CVE-2003-0156
Directory traversal vulnerability in Cross-Referencing Linux (LXR) allows remote attackers to read arbitrary files via .. (dot dot) sequences in the v parameter.
Affected Products: n/a
References: [{'name': 'DSA-264', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-264'}, {'name': '7062', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7062'}, {'name': '20030311 Cross-Referencing Linux vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104739747222492&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0159
Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Affected Products: n/a
References: [{'name': '7050', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7050'}, {'name': 'oval:org.mitre.oval:def:55', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A55'}, {'name': 'RHSA-2003:077', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-077.html'}, {'name': 'SuSE-SA:2003:019', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_019_ethereal.html'}, {'name': '20030309 GLSA:  ethereal (200303-10)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104741640924709&w=2'}, {'name': 'MDKSA-2003:051', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:051'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00008.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0160
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.2.11 allow remote attackers to inject arbitrary HTML code and steal information from a client's web browser.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/mailarchive/forum.php?thread_id=1641953&forum_id=1988'}, {'name': 'RHSA-2003:112', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-112.html'}, {'name': 'oval:org.mitre.oval:def:614', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A614'}]
CVE State: PUBLISHED
Explain CVE-2003-0162
Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page.
Affected Products: n/a
References: [{'name': 'DSA-271', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-271'}, {'name': '20030227 Ecardis Password Reseting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104636153214262&w=2'}, {'name': 'ecartis-password-reset(11431)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11431'}, {'name': '20030303 Re: Ecardis Password Reseting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104673407728323&w=2'}, {'name': '6971', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6971'}]
CVE State: PUBLISHED
Explain CVE-2003-0163
decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service (crash) via a negative length, which overwrites arbitrary heap memory with a zero byte.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/advisories/R7-0013.html'}, {'name': '20030412 R7-0013: Heap Corruption in Gaim-Encryption Plugin', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105013281120352&w=2'}, {'name': '7182', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7182'}]
CVE State: PUBLISHED
Explain CVE-2003-0165
Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:52', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A52'}, {'name': '7121', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7121'}, {'name': 'MDKSA-2003:048', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:048'}, {'name': "20030328 Vulnerability in GNOME's Eye of Gnome", 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0157.html'}, {'name': 'VU#363001', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/363001'}, {'name': 'RHSA-2003:128', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-128.html'}, {'name': "20030328 CORE-2003-0304-03: Vulnerability in GNOME's Eye of Gnome", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104887189724146&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/common/showdoc.php?idx=312&idxseccion=10'}]
CVE State: PUBLISHED
Explain CVE-2003-0166
Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.
Affected Products: n/a
References: [{'name': '20030402 Inaccurate Reports Concerning PHP Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104931415307111&w=2'}, {'name': 'CLSA-2003:691', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000691'}, {'name': '20030327 RE: FUD-ALARM: @(#)Mordred Labs advisory - Integer overflow in PHP memory allocator', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104878100719467&w=2'}, {'name': '7198', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7198'}, {'name': '20030326 @(#)Mordred Labs advisory - Integer overflow in PHP memory allocator', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104869828526885&w=2'}, {'name': '7197', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7197'}]
CVE State: PUBLISHED
Explain CVE-2003-0167
Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a specially crafted mail folder, a different vulnerability than CVE-2003-0140.
Affected Products: n/a
References: [{'name': '7229', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7229'}, {'name': 'DSA-274', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-274'}, {'name': 'DSA-300', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-300'}]
CVE State: PUBLISHED
Explain CVE-2003-0168
Buffer overflow in Apple QuickTime Player 5.x and 6.0 for Windows allows remote attackers to execute arbitrary code via a long QuickTime URL.
Affected Products: n/a
References: [{'name': '10561', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10561'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/03.31.03.txt'}, {'name': '20030401 Fwd: QuickTime 6.1 for Windows is available', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/317141/30/25220/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00027.html'}, {'name': '20030401 iDEFENSE Security Advisory 03.31.03: Buffer Overflow in Windows QuickTime Player', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/317148/30/25220/threaded'}, {'name': 'VU#112553', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/112553'}, {'name': '7247', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7247'}, {'name': 'APPLE-SA-2003-03-31', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://www.securityfocus.com/archive/1/317141/30/25220/threaded'}, {'name': '20030331 iDEFENSE Security Advisory 03.31.03: Buffer Overflow in Windows QuickTime Player', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0166.html'}, {'name': 'quicktime-url-bo(11671)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11671'}]
CVE State: PUBLISHED
Explain CVE-2003-0169
hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of service (CPU consumption) via a request to hpnst.exe that calls itself, which causes an infinite loop.
Affected Products: n/a
References: [{'name': '20030331 [DDI-1012] Malformed request causes denial of service in HP Instant TopTools', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0164.html'}, {'name': '20030331 [DDI-1012] Malformed request causes denial of service in HP Instant TopTools', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104914959705949&w=2'}, {'name': '7246', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7246'}]
CVE State: PUBLISHED
Explain CVE-2003-0170
Unknown vulnerability in ftpd in IBM AIX 5.2, when configured to use Kerberos 5 for authentication, allows remote attackers to gain privileges via unknown attack vectors.
Affected Products: n/a
References: [{'name': '7346', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7346'}, {'name': 'aix-ftpd-gain-access(11823)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11823'}, {'name': '4878', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4878'}, {'name': 'IY42424', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=isg1IY42424'}, {'name': 'MSS-OAR-E01-2003.0469.1', 'tags': ['vendor-advisory', 'x_refsource_IBM'], 'url': 'http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2003.0469.1'}]
CVE State: PUBLISHED
Explain CVE-2003-0171
DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program.
Affected Products: n/a
References: [{'name': 'A041003-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a041003-1.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00028.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0172
Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument.
Affected Products: n/a
References: [{'name': '20030402 Inaccurate Reports Concerning PHP Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104931415307111&w=2'}, {'name': '20030327 Re: @(#)Mordred Labs advisory - PHP for Win32: buffer overflow in openlog() function', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/316583'}, {'name': '2113', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2113'}, {'name': '20030327 @(#)Mordred Labs advisory - PHP for Win32: buffer overflow in openlog() function', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104878149020152&w=2'}, {'name': '7210', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7210'}, {'name': '20041222 PHP v4.3.x exploit for Windows.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/385238'}, {'name': 'php-openlog-stack-bo(11637)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11637'}]
CVE State: PUBLISHED
Explain CVE-2003-0173
xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'VU#111673', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/111673'}, {'name': 'MDKSA-2003:047', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:047'}, {'name': '20030404-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030404-01-P'}, {'name': 'DSA-283', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-283'}]
CVE State: PUBLISHED
Explain CVE-2003-0174
The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.
Affected Products: n/a
References: [{'name': '7442', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7442'}, {'name': 'irix-ldap-authentication-bypass(11860)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11860'}, {'name': '20030407-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030407-01-P'}, {'name': 'N-084', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-084.shtml'}]
CVE State: PUBLISHED
Explain CVE-2003-0175
SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWATCH ioctl.
Affected Products: n/a
References: [{'name': 'irix-piocswatch-ioctl-dos(12241)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12241'}, {'name': '7868', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7868'}, {'name': '1008770', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1008770'}, {'name': 'VU#142228', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/142228'}, {'name': '20030603-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030603-01-P'}]
CVE State: PUBLISHED
Explain CVE-2003-0176
The Name Service Daemon (nsd), when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via a UDP port scan.
Affected Products: n/a
References: [{'name': '20030701-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030701-01-P'}]
CVE State: PUBLISHED
Explain CVE-2003-0177
SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause subsequent group membership entries to be processed inadvertently.
Affected Products: n/a
References: [{'name': '20030701-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030701-01-P'}]
CVE State: PUBLISHED
Explain CVE-2003-0179
Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control.
Affected Products: n/a
References: [{'name': '20030217 Domino Advisories UPDATE', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104550335103136&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21104543'}, {'name': 'CA-2003-11', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2003-11.html'}, {'name': '20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=104558778131373&w=2'}, {'name': '6872', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6872'}, {'name': 'VU#571297', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/571297'}, {'name': '20030217 Domino Advisories UPDATE', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=104558778331387&w=2'}, {'name': 'N-065', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-065.shtml'}, {'name': 'lotus-notes-activex-bo(11339)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11339'}, {'name': '20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0082.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/lotus-inotesclientaxbo.txt'}, {'name': '20030217 Lotus iNotes Client ActiveX Control Buffer Overrun (#NISR17022003c)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104550124032513&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0180
Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the h_PageUI form.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/lotus-60dos.txt'}, {'name': 'CA-2003-11', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2003-11.html'}, {'name': 'lotus-incomplete-post-dos(11360)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11360'}, {'name': '6951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6951'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21104528'}, {'name': '20030218 More Lotus Domino Advisories', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0086.html'}, {'name': 'N-065', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-065.shtml'}, {'name': 'VU#355169', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/355169'}]
CVE State: PUBLISHED
Explain CVE-2003-0181
Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the s_Validation form with a long, unknown parameter name.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/lotus-60dos.txt'}, {'name': 'CA-2003-11', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2003-11.html'}, {'name': '6951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6951'}, {'name': 'lotus-invalid-field-dos(11361)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11361'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21104528'}, {'name': '20030218 More Lotus Domino Advisories', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0086.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0187
The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows remote attackers to cause a denial of service (resource consumption) due to an inconsistency with Linux 2.4.20's support of linked lists, which causes Netfilter to fail to identify connections with an UNCONFIRMED status and use large timeouts.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:260', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A260'}, {'name': '20030802 [SECURITY] Netfilter Security Advisory: Conntrack list_del() DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105986028426824&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0188
lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:430', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A430'}, {'name': 'RHSA-2003:169', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-169.html'}, {'name': 'DSA-304', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-304'}, {'name': 'RHSA-2003:167', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-167.html'}, {'name': 'TLSA-2003-35', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/security/TLSA-2003-35.txt'}]
CVE State: PUBLISHED
Explain CVE-2003-0190
OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.
Affected Products: n/a
References: [{'name': 'RHSA-2003:222', 'tags': ['vendor-advisory'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-222.html'}, {'name': '20030430 OpenSSH/PAM timing attack allows remote users identification', 'tags': ['mailing-list'], 'url': 'http://marc.info/?l=bugtraq&m=105172058404810&w=2'}, {'name': '7467', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/7467'}, {'name': '20030806 [OpenPKG-SA-2003.035] OpenPKG Security Advisory (openssh)', 'tags': ['mailing-list'], 'url': 'http://marc.info/?l=bugtraq&m=106018677302607&w=2'}, {'name': 'RHSA-2003:224', 'tags': ['vendor-advisory'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-224.html'}, {'name': 'oval:org.mitre.oval:def:445', 'tags': ['vdb-entry', 'signature'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A445'}, {'url': 'http://lab.mediaservice.net/advisory/2003-01-openssh.txt'}, {'name': 'TLSA-2003-31', 'tags': ['vendor-advisory'], 'url': 'http://www.turbolinux.com/security/TLSA-2003-31.txt'}, {'name': '20030430 OpenSSH/PAM timing attack allows remote users identification', 'tags': ['mailing-list'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-April/004815.html'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED
Explain CVE-2003-0193
msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names ("word$$.html").
Affected Products: n/a
References: [{'name': '11193', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/11193'}, {'name': '11560', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11560'}, {'name': '13021', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13021/'}, {'name': '13022', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13022/'}, {'name': 'catdoc-xlsview-symlink(16335)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16335'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=183525'}, {'name': 'DSA-575', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-575'}]
CVE State: PUBLISHED
Explain CVE-2003-0194
tcpdump does not properly drop privileges to the pcap user when starting up.
Affected Products: n/a
References: [{'name': 'RHSA-2003:174', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-174.html'}, {'name': 'RHSA-2003:151', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-151.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0195
CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (631), which does not time out.
Affected Products: n/a
References: [{'name': '20030529 [slackware-security]  CUPS DoS vulnerability fixed (SSA:2003-149-01)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105427288724449&w=2'}, {'name': 'TLSA-2003-33', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/security/TLSA-2003-33.txt'}, {'name': 'MDKSA-2003:062', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:062'}, {'name': 'oval:org.mitre.oval:def:6', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6'}, {'name': 'CLSA-2003:678', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000678'}, {'name': '7637', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7637'}, {'name': 'DSA-317', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-317'}, {'name': 'SuSE-SA:2003:028', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_028.html'}, {'name': 'RHSA-2003:171', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-171.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0196
Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different vulnerability than CVE-2003-0201.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:564', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A564'}, {'name': 'DSA-280', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-280'}, {'name': 'MDKSA-2003:044', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:044'}, {'name': 'RHSA-2003:137', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-137.html'}, {'name': '20030407 [OpenPKG-SA-2003.028] OpenPKG Security Advisory (samba)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104973186901597&w=2'}, {'name': '20030407 Immunix Secured OS 7+ samba update', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104974612519064&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0197
Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK).
Affected Products: n/a
References: [{'name': '20030403 SRT2003-04-03-1300 - Interbase ISC_LOCK_ENV overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104940730819887&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.secnetops.com/research/advisories/SRT2003-04-03-1300.txt'}, {'name': '20030403 SRT2003-04-03-1300 - Interbase ISC_LOCK_ENV overflow', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0003.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0198
Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00028.html'}]
CVE State: PUBLISHED
Explain CVE-2003-0201
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
Affected Products: n/a
References: [{'name': 'CLA-2003:624', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000624'}, {'name': '20030408 [Sorcerer-spells] SAMBA--SORCERER2003-04-08', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104981682014565&w=2'}, {'name': '20030403-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030403-01-P'}, {'name': 'SuSE-SA:2003:025', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_025_samba.html'}, {'name': '7294', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7294'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitaldefense.net/labs/advisories/DDI-1013.txt'}, {'name': '20030407 [DDI-1013] Buffer Overflow in Samba allows remote root compromise', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104972664226781&w=2'}, {'name': 'DSA-280', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-280'}, {'name': '20030409 GLSA:  samba (200304-02)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104994564212488&w=2'}, {'name': 'VU#267873', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/267873'}, {'name': 'MDKSA-2003:044', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:044'}, {'name': 'RHSA-2003:137', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-137.html'}, {'name': '20030407 Immunix Secured OS 7+ samba update', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104974612519064&w=2'}, {'name': 'oval:org.mitre.oval:def:567', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A567'}, {'name': 'oval:org.mitre.oval:def:2163', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2163'}]
CVE State: PUBLISHED
Explain CVE-2003-0202
The (1) halstead and (2) gather_stats scripts in metrics 1.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
Affected Products: n/a
References: [{'name': 'DSA-279', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-279'}, {'name': '7293', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7293'}, {'name': 'metrics-tmpfile-symlink(11734)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11734'}]
CVE State: PUBLISHED
Explain CVE-2003-0203
Buffer overflow in moxftp 2.2 and earlier allows remote malicious FTP servers to execute arbitrary code via a long FTP banner.
Affected Products: n/a
References: [{'name': '8136', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8136'}, {'name': '6921', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6921'}, {'name': 'moxftp-welcome-banner-bo(11399)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11399'}, {'name': '20030223 moxftp arbitrary code execution poc/advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104610380126860&w=2'}, {'name': 'DSA-281', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-281'}, {'name': '20030223 moxftp arbitrary code execution poc/advisory', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2003-02/0338.html'}, {'name': '1006156', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006156'}]
CVE State: PUBLISHED
Explain CVE-2003-0204
KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or (2) PDF files, related to missing -dPARANOIDSAFER and -dSAFER arguments when using the kghostview Ghostscript viewer.
Affected Products: n/a
References: [{'name': '20030412 [Sorcerer-spells] KDE-SORCERER2003-04-12', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105017403010459&w=2'}, {'name': 'MDKSA-2003:049', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:049'}, {'name': 'CLA-2003:668', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000668'}, {'name': 'DSA-296', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-296'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.kde.org/show_bug.cgi?id=53343'}, {'name': '20030414 GLSA:  kde-2.x (200304-05.1)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105034222521369&w=2'}, {'name': 'CLA-2003:747', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000747'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20030409-1.txt'}, {'name': 'RHSA-2003:002', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.kde.org/show_bug.cgi?id=56808'}, {'name': '20030410 GLSA:  kde-3.x (200304-04)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105001557020141&w=2'}, {'name': 'DSA-284', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-284'}, {'name': 'DSA-293', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-293'}, {'name': '20030411 GLSA:  kde-2.x (200304-05)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105012994719099&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0205
gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI.
Affected Products: n/a
References: [{'name': 'DSA-294', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-294'}, {'name': '20030423 Security problems in gkrellm-newsticker', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105111327000755&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0206
gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to cause a denial of service (crash) via (1) link or (2) title elements that contain multiple lines.
Affected Products: n/a
References: [{'name': 'DSA-294', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-294'}, {'name': '20030423 Security problems in gkrellm-newsticker', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105111327000755&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0207
ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers to overwrite arbitrary files.
Affected Products: n/a
References: [{'name': 'DSA-286', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-286'}]
CVE State: PUBLISHED
Explain CVE-2003-0208
Cross-site scripting (XSS) vulnerability in Macromedia Flash ad user tracking capability allows remote attackers to insert arbitrary Javascript via the clickTAG field.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/support/flash/ts/documents/clicktag_security.htm'}, {'name': '20030413 Misuse of Macromedia Flash Ads clickTAG Option May Lead to Privacy Breach', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-April/004514.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/securitynews/5XP0B0U9PE.html'}, {'name': '20030413 Misuse of Macromedia Flash Ads clickTAG Option May Lead to Privacy Breach', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105033712615013&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0209
Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.
Affected Products: n/a
References: [{'name': '20030422 GLSA:  snort (200304-05)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105103586927007&w=2'}, {'name': '7178', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7178'}, {'name': 'CA-2003-13', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2003-13.html'}, {'name': '20030415 CORE-2003-0307: Snort TCP Stream Reassembly Integer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105043563016235&w=2'}, {'name': 'ESA-20030430-013', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://marc.info/?l=bugtraq&m=105172790914107&w=2'}, {'name': 'VU#139129', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/139129'}, {'name': 'DSA-297', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-297'}, {'name': '20030423 Snort <=1.9.1 exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105111217731583&w=2'}, {'name': 'MDKSA-2003:052', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:052'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/common/showdoc.php?idx=313&idxseccion=10'}, {'name': '20030428 GLSA:  snort (200304-06)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105154530427824&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0210
Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002.
Affected Products: n/a
References: [{'name': '20030424 NSFOCUS SA2003-04 : Remote Buffer Overflow Vulnerability in Web Management Interface of Cisco Secure ACS', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=105118056332344&w=2'}, {'name': '20030424 NSFOCUS SA2003-04 : Remote Buffer Overflow Vulnerability in Web Management Interface of Cisco Secure ACS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105120066126196&w=2'}, {'name': '20030423 Cisco Secure Access Control Server for Windows Admin Buffer Overflow Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20030423-ACS.shtml'}, {'name': 'VU#697049', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/697049'}]
CVE State: PUBLISHED
Explain CVE-2003-0211
Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service (memory consumption) via a large number of rejected connections.
Affected Products: n/a
References: [{'name': 'CLA-2003:782', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000782'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=88537'}, {'name': 'RHSA-2003:160', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-160.html'}, {'name': 'oval:org.mitre.oval:def:657', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A657'}, {'name': '20030418 Xinetd 2.3.10 Memory Leaks', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105068673220605&w=2'}, {'name': 'MDKSA-2003:056', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:056'}]
CVE State: PUBLISHED
Explain CVE-2003-0212
handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes full and sets an array index incorrectly, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of connections.
Affected Products: n/a
References: [{'name': 'DSA-289', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-289'}, {'name': '20030417 Vulnerability in rinetd', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105059298502830&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0213
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow.
Affected Products: n/a
References: [{'name': '20030418 Exploit for PoPToP PPTP server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105068728421160&w=2'}, {'name': 'SuSE-SA:2003:029', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_029.html'}, {'name': 'VU#673993', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/673993'}, {'name': '7316', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7316'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=138437'}, {'name': 'DSA-295', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-295'}, {'name': '20030422 Re: Exploit for PoPToP PPTP server - Linux version', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/319428'}, {'name': '20030409 PoPToP PPTP server remotely exploitable buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/317995'}, {'name': '20030428 GLSA:  pptpd (200304-08)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105154539727967&w=2'}]
CVE State: PUBLISHED
Explain CVE-2003-0214
run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Affected Products: n/a
References: [{'name': 'DSA-292', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-292'}]
CVE State: PUBLISHED
Explain CVE-2003-0215
SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via the (1) username and (2) password fields, and possibly other fields.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.battleaxesoftware.com/forums/forum.asp?forumid=36&select=1812'}, {'name': '1006632', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1006632'}, {'name': '20030424 SQL injection in BttlxeForum', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105120052725940&w=2'}]
CVE State: PUBLISHED