DuyTa/cve-kgrag-db huggingface dataset:
CVE-2003-1444
Kaspersky Antivirus (KAV) 4.0.9.0 allows local users to cause a denial of service (CPU consumption or crash) and prevent malicious code from being detected via a file with a long pathname.
CVSS v2.0 Score: 4.4 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P
Affected Products: kaspersky_anti-virus
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0130.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/11291, http://archives.neohapsis.com/archives/bugtraq/2003-02/0130.html
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2003-1346
D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dwl-900ap\+
Related CWEs: CWE-264
References: http://marc.info/?l=bugtraq&m=104267037431451&w=2, http://marc.info/?l=bugtraq&m=104311601319909&w=2, http://www.securityfocus.com/bid/6609
CWE: CWE-264
CVE-2003-0411
Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_2000, windows_xp, sun_one_application_server
Related CWEs: CWE-178
References: http://marc.info/?l=bugtraq&m=105409846029475&w=2, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity, http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1
CWE: CWE-178
CVE-2003-0058
MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos, enterprise_authentication_mechanism, solaris, kerberos_5
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000639, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/50142, http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-001-multiple.txt
CVE-2003-0380
Buffer overflow in atftp daemon (atftpd) 0.6.1 and earlier, and possibly later versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: atftpd
References: http://archives.neohapsis.com/archives/bugtraq/2003-06/0056.html, http://www.debian.org/security/2003/dsa-314, http://www.securityfocus.com/archive/82/323886/2003-06-02/2003-06-08/0
CVE-2003-0972
Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: screen
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000809, http://groups.yahoo.com/group/gnu-screen/message/3118, http://marc.info/?l=bugtraq&m=106995837813873&w=2
CVE-2003-1451
Buffer overflow in Symantec Norton AntiVirus 2002 allows remote attackers to execute arbitrary code via an e-mail attachment with a compressed ZIP file that contains a file with a long filename.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: norton_antivirus
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://securityresponse.symantec.com/avcenter/security/Content/2003.02.28.html, http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-02/0233.html, http://www.lac.co.jp/security/english/snsadv_e/61_e.html
CWE: CWE-119
CVE-2003-0330
Buffer overflow in unknown versions of Maelstrom allows local users to execute arbitrary code via a long -player command line argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: maelstrom
References: http://marc.info/?l=bugtraq&m=105344891005369&w=2, http://www.securitytracker.com/id?1008832, http://marc.info/?l=bugtraq&m=105344891005369&w=2
CVE-2003-1212
MaxWebPortal 1.30 allows remote attackers to perform unauthorized actions by modifying hidden form fields, such as the (1) news, (2) lock, or (3) allmem fields in the 'start new topic' HTML page.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: maxwebportal
References: http://archives.neohapsis.com/archives/bugtraq/2003-06/0048.html, http://secunia.com/advisories/8979, http://www.osvdb.org/4933
CVE-2003-1442
The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hm220dp_adsl_modem
Related CWEs: CWE-287
Related CAPECs: CAPEC-151, CAPEC-94, CAPEC-593
MITRE ATT&CK Techniques: T1134, T1550.001, T1557
MITRE ATT&CK Tactics: T1550, T1505
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0127.html, http://marc.info/?l=bugtraq&m=104619331706574&w=2, http://www.securityfocus.com/bid/6824
CWE: CWE-287
MITRE ATT&CK techniques: T1134, T1550.001, T1557, T1185, T1505.003, T1548, T1563, T1040
MITRE ATT&CK tactics: T1550, T1505
CVE-2003-0238
The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CPU consumption) by spoofing the address of an ADS server and sending HTML with a -1 width in a table tag.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: icq
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html, http://marc.info/?l=bugtraq&m=105216842131995&w=2, http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
CVE-2003-1313
Multiple PHP remote file inclusion vulnerabilities in EternalMart Mailing List Manager (EMLM) 1.32 allow remote attackers to execute arbitrary PHP code via a URL in (1) the emml_admin_path parameter to admin/auth.php or (2) the emml_path parameter to emml_email_func.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailing_list_manager
References: http://securitytracker.com/id?1007884, http://www.securityfocus.com/archive/1/340244, http://www.securityfocus.com/bid/8767
CVE-2003-1208
Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session parameter to a long value, or providing long parameters to the (2) NUMTOYMINTERVAL, (3) NUMTODSINTERVAL or (4) FROM_TZ functions.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: oracle9i
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0030.html, http://secunia.com/advisories/10805, http://www.ciac.org/ciac/bulletins/o-093.shtml
CVE-2003-0693
A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openssh
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010103.html, http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010135.html, http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010146.html
CVE-2003-0736
Multiple cross-site scripting (XSS) vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script via (1) the day parameter in the calendar module, (2) the fatcat_id parameter in the fatcat module, (3) the PAGE_id parameter in the pagemaster module, (4) the PDA_limit parameter in the search, and (5) possibly other parameters in the calendar, fatcat, and pagemaster modules.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: phpwebsite
References: http://marc.info/?l=bugtraq&m=106062021711496&w=2, http://marc.info/?l=bugtraq&m=106252188522715&w=2, http://www.kb.cert.org/vuls/id/664422
CVE-2003-1025
Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability."
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: internet_explorer
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://www.kb.cert.org/vuls/id/652278, http://www.securityfocus.com/archive/1/346948, http://www.us-cert.gov/cas/techalerts/TA04-033A.html
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2003-1049
IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to modify or delete certain DB2 files.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: db2_universal_database
References: http://www-1.ibm.com/support/search.wss?rs=0&q=IY44841&apar=only, http://www-1.ibm.com/support/search.wss?rs=0&q=IY44842&apar=only, http://www.securityfocus.com/bid/9243
CVE-2003-0041
Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mandrake_linux, kerberos_ftp_client, mandrake_multi_network_firewall, linux
Related CWEs: CWE-78
Related CAPECs: CAPEC-43, CAPEC-6, CAPEC-88
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0047.html, http://secunia.com/advisories/7979, http://secunia.com/advisories/8114
CWE: CWE-78
CVE-2003-0112
Buffer overflow in Windows Kernel allows local users to gain privileges by causing certain error messages to be passed to a debugger.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt, windows_2000, windows_2000_terminal_services, windows_xp
References: http://www.kb.cert.org/vuls/id/446338, http://www.securityfocus.com/bid/7370, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-013
CVE-2003-0062
Buffer overflow in Eset Software NOD32 for UNIX before 1.013 allows local users to execute arbitrary code via a long path name.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: nod32_antivirus
References: http://marc.info/?l=bugtraq&m=104490777824360&w=2, http://www.idefense.com/advisory/02.10.03.txt, http://www.iss.net/security_center/static/11282.php
CVE-2003-0896
The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager's checkPackageAccess method.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jre
References: http://lsd-pl.net/code/JVM/jre.tar.gz, http://marc.info/?l=bugtraq&m=106692334503819&w=2, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57221
CVE-2003-0730
Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflow attacks.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: x11r6, netbsd
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-015.txt.asc, ftp://patches.sgi.com/support/free/security/advisories/20031101-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821
CVE-2003-0843
Format string vulnerability in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode and using the Apache log, allows remote attackers to execute arbitrary code via format string characters in an HTTP GET request with an "Accept-Encoding: gzip" header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mod_gzip
References: http://marc.info/?l=bugtraq&m=105457180009860&w=2, http://marc.info/?l=bugtraq&m=105457180009860&w=2
CVE-2003-0435
Buffer overflow in net_swapscore for typespeed 0.4.1 and earlier allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: typespeed
References: http://marc.info/?l=bugtraq&m=105553002105111&w=2, http://www.debian.org/security/2003/dsa-322, http://marc.info/?l=bugtraq&m=105553002105111&w=2
CVE-2003-0567
Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: ons_15454_optical_transport_platform, ios, optical_networking_systems_software
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006743.html, http://www.cert.org/advisories/CA-2003-15.html, http://www.cert.org/advisories/CA-2003-17.html
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2003-0834
Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: open_unix, unixware
References: ftp://patches.sgi.com/support/free/security/advisories/20040801-01-P, http://archives.neohapsis.com/archives/hp/2003-q4/0047.html, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57414
CVE-2003-1207
Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service (crash) via a dir command with a large number of "." characters followed by a "/*" string.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: crob_ftp_server
References: http://secunia.com/advisories/10778, http://securitytracker.com/id?1008908, http://www.securityfocus.com/archive/1/352329
CVE-2003-0337
The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute arbitrary programs by modifying the LSF_ENVDIR environment variable to reference an alternate lsf.conf file, then modifying LSF_SERVERDIR to point to a malicious lim program, which lsadmin then executes.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lsadmin
References: http://marc.info/?l=bugtraq&m=105361879109409&w=2, http://marc.info/?l=bugtraq&m=105361879109409&w=2
CVE-2003-0007
Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: outlook
References: http://www.securityfocus.com/bid/6667, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-003, https://exchange.xforce.ibmcloud.com/vulnerabilities/11133
CVE-2003-0114
The file upload control in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to automatically upload files from the local system via a web page containing a script to upload the files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ie, internet_explorer
References: http://marc.info/?l=bugtraq&m=104429340817718&w=2, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-015, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A963
CVE-2003-0316
Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for various protocols, including an open relay for SMTP, which allows it to be abused by spammers.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: venturi_client
References: http://archives.neohapsis.com/archives/bugtraq/2003-05/0188.html, http://www.venturiwireless.com/tech_support/Q_and_A/Q_A_09.htm, http://archives.neohapsis.com/archives/bugtraq/2003-05/0188.html
CVE-2003-0378
The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x
References: http://docs.info.apple.com/article.html?artnum=107579, http://www.kb.cert.org/vuls/id/467828, http://docs.info.apple.com/article.html?artnum=107579
CVE-2003-0522
Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via the idadmin parameter to login.asp or (2) gain other privileges via the Email parameter to Custva.asp.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: productcart
References: http://marc.info/?l=bugtraq&m=105733145930031&w=2, http://marc.info/?l=bugtraq&m=105760660928715&w=2, http://marc.info/?l=bugtraq&m=105733145930031&w=2
CVE-2003-1040
kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service (crash) by sending certain signals to kmod.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: ftp://patches.sgi.com/support/free/security/advisories/20040204-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820, http://linux.bkbits.net:8080/linux-2.4/diffs/kernel/kmod.c%401.6?nav=index.html%7Csrc/%7Csrc/kernel%7Chist/kernel/kmod.c
CVE-2003-1258
activate.php in versatileBulletinBoard (vBB) 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: versatilebulletinboard
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0017.html, http://www.iss.net/security_center/static/11044.php, http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0017.html
CVE-2003-1329
ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote attackers to cause a denial of service.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: wu-ftpd
References: ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.2/connect-dos.patch, http://www.osvdb.org/34670, ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.2/connect-dos.patch
CVE-2003-0175
SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWATCH ioctl.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20030603-01-P, http://www.kb.cert.org/vuls/id/142228, http://www.securityfocus.com/bid/7868
CVE-2003-0393
Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Internet Traffic" modes, which allows remote attackers to identify running services via FIN scans or Xmas scans.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: privatefirewall
References: http://marc.info/?l=bugtraq&m=105380229532320&w=2, http://www.securityfocus.com/bid/7700, http://marc.info/?l=bugtraq&m=105380229532320&w=2
CVE-2003-1337
Heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: abyss_web_server
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://archives.neohapsis.com/archives/bugtraq/2003-06/0235.html, http://www.securityfocus.com/bid/8062, https://exchange.xforce.ibmcloud.com/vulnerabilities/12466
CWE: CWE-119
CVE-2003-0173
xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: xfsdump, irix
References: ftp://patches.sgi.com/support/free/security/advisories/20030404-01-P, http://www.debian.org/security/2003/dsa-283, http://www.kb.cert.org/vuls/id/111673
CVE-2003-0329
CesarFTP 0.99g stores user names and passwords in plaintext in the settings.ini file, which could allow local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cesarftp
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0074.html, http://marc.info/?l=bugtraq&m=105344578100315&w=2, http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0074.html
CVE-2003-0477
wzdftpd 0.1rc4 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command without an argument.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wzdftpd
References: http://marc.info/?l=bugtraq&m=105674242105302&w=2, http://www.wzdftpd.net/changea.html, http://marc.info/?l=bugtraq&m=105674242105302&w=2
CVE-2003-0038
Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mailman
References: http://marc.info/?l=bugtraq&m=104342745916111, http://telia.dl.sourceforge.net/sourceforge/mailman/xss-2.1.0-patch.txt, http://www.debian.org/security/2004/dsa-436
CVE-2003-0180
Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the h_PageUI form.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: lotus_domino_web_server
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0086.html, http://www-1.ibm.com/support/docview.wss?uid=swg21104528, http://www.cert.org/advisories/CA-2003-11.html
CVE-2003-1128
XMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7, 2003, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to TCP port 8086.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xmms_remote
References: http://secunia.com/advisories/8775, http://www.kb.cert.org/vuls/id/583020, http://www.securityfocus.com/bid/7534
CVE-2003-1585
Cross-site scripting (XSS) vulnerability in WebLogExpert allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: weblog_expert
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://www.securityfocus.com/archive/1/313867, https://exchange.xforce.ibmcloud.com/vulnerabilities/56647, http://www.securityfocus.com/archive/1/313867
CWE: CWE-79
CVE-2003-0260
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service (slowdown and possibly reload) via a flood of malformed ICMP packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: vpn_3060_concentrator, vpn_3000_concentrator_series_software, vpn_3080_concentrator, vpn_3030_concentator, vpn_3002_hardware_client
References: http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml, http://www.kb.cert.org/vuls/id/221164, https://exchange.xforce.ibmcloud.com/vulnerabilities/11956
CVE-2003-0511
The web server for Cisco Aironet AP1x00 Series Wireless devices running certain versions of IOS 12.2 allow remote attackers to cause a denial of service (reload) via a malformed URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0055.html, http://www.cisco.com/warp/public/707/cisco-sa-20030728-ap1x00.shtml, http://www.vigilante.com/inetsecurity/advisories/VIGILANTE-2003001.htm
CVE-2003-1605
curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server.
CVSS v3.0 Score: 7.5 (HIGH)
CVSS v3.0 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: curl
Related CWEs: CWE-255
References: http://www.securityfocus.com/bid/8432, https://curl.haxx.se/docs/CVE-2003-1605.html, http://www.securityfocus.com/bid/8432
CWE: CWE-255
CVE-2003-1063
The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-56300-1, http://www.ciac.org/ciac/bulletins/n-134.shtml, http://www.securityfocus.com/bid/8461
CVE-2003-0688
The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd, freebsd, sendmail, irix, tru64
References: ftp://patches.sgi.com/support/free/security/advisories/20030803-01-P, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000727, http://www.kb.cert.org/vuls/id/993452
CVE-2003-1351
Directory traversal vulnerability in edittag.cgi in EditTag 1.1 allows remote attackers to read arbitrary files via a "%2F.." (encoded slash dot dot) in the file parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: edittag
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://securityreason.com/securityalert/3231, http://www.securityfocus.com/archive/1/308162, http://www.securityfocus.com/bid/6675
CWE: CWE-22
CVE-2003-0213
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pptp_server
References: http://marc.info/?l=bugtraq&m=105068728421160&w=2, http://marc.info/?l=bugtraq&m=105154539727967&w=2, http://sourceforge.net/project/shownotes.php?release_id=138437
CVE-2003-0845
Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct unauthorized activities and possibly execute arbitrary code via certain SQL statements to (1) TCP port 1701 in JBoss 3.2.1, and (2) port 1476 in JBoss 3.0.8.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jboss
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://marc.info/?l=bugtraq&m=106546044416498&w=2, http://marc.info/?l=bugtraq&m=106547728803252&w=2, http://secunia.com/advisories/27914
CWE: CWE-89
CVE-2003-1209
The Post_Method function in Monkey HTTP Daemon before 0.6.2 allows remote attackers to cause a denial of service (crash) via a POST request without a Content-Type header.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: monkey
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://monkeyd.sourceforge.net/Changelog.txt, http://www.securityfocus.com/bid/7201, https://exchange.xforce.ibmcloud.com/vulnerabilities/11650
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2003-0206
gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to cause a denial of service (crash) via (1) link or (2) title elements that contain multiple lines.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gkrellm_newsticker
References: http://marc.info/?l=bugtraq&m=105111327000755&w=2, http://www.debian.org/security/2003/dsa-294, http://marc.info/?l=bugtraq&m=105111327000755&w=2
CVE-2003-0857
The (1) ipq_read and (2) ipulog_read functions in iptables allow local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux
Related CWEs: CWE-264
References: https://bugzilla.redhat.com/show_bug.cgi?id=108574, https://bugzilla.redhat.com/show_bug.cgi?id=108574
CWE: CWE-264
CVE-2003-1502
mod_throttle 3.0 allows local users with Apache privileges to access shared memory that points to a file that is writable by the apache user, which could allow local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mod_throttle
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012043.html, http://www.securityfocus.com/bid/8822, http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012043.html
CVE-2003-0789
mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could cause Apache to send the output of a CGI program to the wrong client.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: http_server
References: http://apache.secsup.org/dist/httpd/Announcement2.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000775, http://docs.info.apple.com/article.html?artnum=61798
CVE-2003-1542
Directory traversal vulnerability in plugins/file.php in phpWebFileManager before 0.4.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the fm_path parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpwebfilemanager
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://platon.sk/projects/release_view_page.php?release_id=2, http://secunia.com/advisories/8183, http://www.securityfocus.com/bid/6933
CWE: CWE-22
CVE-2003-0543
Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openssl
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=104893, http://secunia.com/advisories/22249, http://sunsolve.sun.com/search/document.do?assetkey=1-66-201029-1
CVE-2003-0557
SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: storefront
References: http://marc.info/?l=bugtraq&m=105804683203384&w=2, http://marc.info/?l=bugtraq&m=105804683203384&w=2
CVE-2003-1161
exit.c in Linux kernel 2.6-test9-CVS, as stored on kernel.bkbits.net, was modified to contain a backdoor, which could allow local users to elevate their privileges by passing __WCLONE|__WALL to the sys_wait4 function.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: http://www.securityfocus.com/bid/8987, http://www.ussg.iu.edu/hypermail/linux/kernel/0311.0/0621.html, http://www.ussg.iu.edu/hypermail/linux/kernel/0311.0/0627.html
CVE-2003-0434
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, mandrake_linux, mandrake_linux_corporate_server, linux, linux_advanced_workstation
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005719.html, http://marc.info/?l=bugtraq&m=105777963019186&w=2, http://secunia.com/advisories/9037
CVE-2003-1511
Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to test.txt, (2) the guestName parameter to the custMsg servlet, or (3) the cookiename parameter to the CookieExample servlet.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: java_http_server
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://secunia.com/advisories/10023, http://securityreason.com/securityalert/3306, http://www.geocities.com/gzhangx/websrv/docs/security.html
CWE: CWE-79
CVE-2003-0302
The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: eudora
References: http://marc.info/?l=bugtraq&m=105294024124163&w=2, http://marc.info/?l=bugtraq&m=105294024124163&w=2
CVE-2003-0602
Multiple cross-site scripting vulnerabilities (XSS) in Bugzilla 2.16.x before 2.16.3 and 2.17.x before 2.17.4 allow remote attackers to insert arbitrary HTML or web script via (1) multiple default German and Russian HTML templates or (2) ALT and NAME attributes in AREA tags as used by the GraphViz graph generation feature for local dependency graphs.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: bugzilla
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000653, http://www.bugzilla.org/security/2.16.2/, http://www.securityfocus.com/bid/6861
CVE-2003-0645
man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the ~/.manpath file, even when running setuid, which could allow local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: man
References: http://marc.info/?l=bugtraq&m=106018504800341&w=2, http://www.debian.org/security/2003/dsa-364, http://www.securityfocus.com/bid/8352
CVE-2003-0214
run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mime-support
References: http://www.debian.org/security/2003/dsa-292, http://www.debian.org/security/2003/dsa-292
CVE-2003-0448
Portmon 1.7 and possibly earlier versions allows local users to read and write arbitrary files via the (1) -c (host file) or (2) -l (log file) command line options.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: portmon
References: http://marc.info/?l=bugtraq&m=105588111714856&w=2, http://marc.info/?l=bugtraq&m=105588111714856&w=2
CVE-2003-1256
aff_liste_langue.php in E-theni allows remote attackers to execute arbitrary PHP code by modifying the rep_include parameter to reference a URL on a remote web server that contains para_langue.php.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: e-theni
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0009.html, http://www.iss.net/security_center/static/11013.php, http://www.securityfocus.com/archive/1/305381
CVE-2003-0221
The (1) dupatch and (2) setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allows local users to overwrite files and possibly gain root privileges via a symlink attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tru64
References: http://www.ciac.org/ciac/bulletins/n-086.shtml, http://www.securityfocus.com/bid/7452, https://exchange.xforce.ibmcloud.com/vulnerabilities/11892
CVE-2003-0695
Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffer_free in buffer.c, or (3) a separate function in channels.c, a different vulnerability than CVE-2003-0693.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openssh
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000741, http://marc.info/?l=bugtraq&m=106373546332230&w=2, http://marc.info/?l=bugtraq&m=106381396120332&w=2
CVE-2003-1273
Winamp 3.0 allows remote attackers to cause a denial of service (crash) via a .b4s file with a playlist name that contains some non-English characters, e.g. Cyrillic characters.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: winamp
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0025.html, http://www.securityfocus.com/bid/6517, https://exchange.xforce.ibmcloud.com/vulnerabilities/10982
CVE-2003-0946
Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the email address argument of a "MAIL FROM" command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: clamav
References: http://marc.info/?l=bugtraq&m=106867135830683&w=2, http://sourceforge.net/project/shownotes.php?release_id=197038, http://marc.info/?l=bugtraq&m=106867135830683&w=2
CVE-2003-0586
Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: estore
References: http://marc.info/?l=bugtraq&m=105845898003616&w=2, http://marc.info/?l=bugtraq&m=105845898003616&w=2
CVE-2003-0982
Buffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11, and 5.x before 5.0.5, allows remote attackers to execute arbitrary code via a long password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: content_distribution_manager_4670, content_router_4450, content_distribution_manager_4650, content_distribution_manager_4630, enterprise_content_delivery_network_software
References: http://secunia.com/advisories/10409, http://www.cisco.com/warp/public/707/cisco-sa-20031210-ACNS-auth.shtml, http://www.kb.cert.org/vuls/id/352462
CVE-2003-0310
Cross-site scripting (XSS) vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: ez_publish
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://marc.info/?l=bugtraq&m=105310013606680&w=2, http://marc.info/?l=bugtraq&m=105310013606680&w=2
CWE: CWE-79
CVE-2003-0412
Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could allow remote attackers to hide malicious activities.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: one_application_server
References: http://marc.info/?l=bugtraq&m=105409846029475&w=2, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity, http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1
CVE-2003-0132
A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache to allocate 80 bytes for each linefeed.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: http_server
Related CWEs: CWE-772
Related CAPECs: CAPEC-469
MITRE ATT&CK Techniques: T1499.002
MITRE ATT&CK Tactics: T1499
References: http://lists.apple.com/mhonarc/security-announce/msg00028.html, http://marc.info/?l=bugtraq&m=104931360606484&w=2, http://marc.info/?l=bugtraq&m=104982175321731&w=2
CWE: CWE-772
MITRE ATT&CK techniques: T1499.002
MITRE ATT&CK tactics: T1499
CVE-2003-1505
Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) by creating a web page or HTML e-mail with a textarea in a div element whose scrollbar-base-color is modified by a CSS style, which is then moved.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Affected Products: internet_explorer
References: http://securityreason.com/securityalert/3295, http://www.securityfocus.com/archive/1/342010, http://www.securityfocus.com/bid/8874
CVE-2003-0679
Unknown vulnerability in the libcpr library for the Checkpoint/Restart (cpr) system on SGI IRIX 6.5.21f and earlier allows local users to truncate or overwrite certain files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20030802-01-P, ftp://patches.sgi.com/support/free/security/advisories/20030802-01-P
CVE-2003-0232
Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sql_server, data_engine
References: http://www.atstake.com/research/advisories/2003/a072303-3.txt, http://www.kb.cert.org/vuls/id/584868, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-031
CVE-2003-0242
IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which could allow traffic that is not explicitly allowed by the policies.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x
References: http://docs.info.apple.com/article.html?artnum=61798, http://secunia.com/advisories/8798, http://securitytracker.com/id?1006796
CVE-2003-0294
autohtml.php in php-proxima 6.0 and earlier allows remote attackers to read arbitrary files via the name parameter in a modload operation.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php-proxima
References: http://marc.info/?l=bugtraq&m=105293834421549&w=2, http://marc.info/?l=bugtraq&m=105293834421549&w=2
CVE-2003-0584
Format string vulnerability in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bru
References: http://marc.info/?l=bugtraq&m=105846288808846&w=2, http://marc.info/?l=bugtraq&m=105846288808846&w=2
CVE-2003-0642
WatchGuard ServerLock for Windows 2000 before SL 2.0.4 allows local users to access kernel memory via a symlink attack on \Device\PhysicalMemory.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: serverlock
References: http://marc.info/?l=bugtraq&m=105848106631132&w=2, http://secunia.com/advisories/9310, http://www.securityfocus.com/bid/8223
CVE-2003-0537
The liece Emacs IRC client 2.0+0.20030527 and earlier creates temporary files insecurely, which could allow local users to overwrite arbitrary files as other users.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: liece_emacs_irc_client
References: http://www.debian.org/security/2003/dsa-341, http://www.debian.org/security/2003/dsa-341
CVE-2003-0737
The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to obtain the full pathname of phpWebSite via an invalid year, which generates an error from localtime() in TimeZone.php of the Pear library.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpwebsite
References: http://marc.info/?l=bugtraq&m=106062021711496&w=2, http://marc.info/?l=bugtraq&m=106252188522715&w=2, http://marc.info/?l=bugtraq&m=106062021711496&w=2
CVE-2003-0416
Cross-site scripting (XSS) vulnerability in index.cgi for Bandmin 1.4 allows remote attackers to insert arbitrary HTML or script via (1) the year parameter in a showmonth action, (2) the month parameter in a showmonth action, or (3) the host parameter in a showhost action.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: bandmin
References: http://marc.info/?l=bugtraq&m=105418152212771&w=2, http://www.iss.net/security_center/static/12108.php, http://www.securityfocus.com/bid/7729
CVE-2003-1236
Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to execute arbitrary code via format string specifiers in syslog.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tanne
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0011.html, http://secunia.com/advisories/7831, http://tanne.fluxnetz.de/download/tanne-0.7.1.tar.bz2
CVE-2003-1289
The iBCS2 system call translator for statfs in NetBSD 1.5 through 1.5.3 and FreeBSD 4 up to 4.8-RELEASE-p2 and 5 up to 5.1-RELEASE-p1 allows local users to read portions of kernel memory (memory disclosure) via a large length parameter, which copies additional kernel memory into userland memory.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netbsd, freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:10.ibcs2.asc, http://secunia.com/advisories/9504, http://securitytracker.com/id?1007460