DuyTa/cve-kgrag-db huggingface dataset:
CVE-2003-0813
A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: windows_server_2003, windows_2000, windows_nt, windows_xp, windows_98
Related CWEs: CWE-367
Related CAPECs: CAPEC-29, CAPEC-27
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011870.html, http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011886.html, http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011901.html
CWE: CWE-367
CVE-2003-1263
ICAL.EXE in iCal 3.7 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, possibly due to an invalid method name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ical
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0011.html, http://www.iss.net/security_center/static/10973.php, http://www.securityfocus.com/bid/6505
CVE-2003-0854
ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wu-ftpd, fileutils
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000768, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000771, http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012548.html
CVE-2003-1466
Unspecified vulnerability in Phorum 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to other sites via (1) register.php or (2) login.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phorum
References: http://securityreason.com/securityalert/3288, http://www.securityfocus.com/archive/1/321310, http://www.securityfocus.com/bid/7581
CVE-2003-0769
Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attackers to insert arbitrary web script and HTML via the message field.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: icq
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2003-0769, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2003-0769
CVE-2003-0849
Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cfengine
References: http://marc.info/?l=bugtraq&m=106451047819552&w=2, http://marc.info/?l=bugtraq&m=106485375218280&w=2, http://marc.info/?l=bugtraq&m=106546086216984&w=2
CVE-2003-0796
Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through 6.5.22 allows remote attackers to mount from unprivileged ports even with the -n option disabled.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20031102-01-P.asc, ftp://patches.sgi.com/support/free/security/advisories/20031102-02-P.asc, http://www.securityfocus.com/bid/9085
CVE-2003-0837
Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a, allows attackers with "Connect" privileges to execute arbitrary code via the INVOKE command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: db2_universal_database
References: http://marc.info/?l=bugtraq&m=106503709914622&w=2, http://www.securityfocus.com/bid/8743, https://exchange.xforce.ibmcloud.com/vulnerabilities/13331
CVE-2003-1603
GE Healthcare Discovery VH has a default password of (1) interfile for the ftpclient user of the Interfile server or (2) "2" for the LOCAL user of the FTP server for the Codonics printer, which has unspecified impact and attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: discovery_vh
Related CWEs: CWE-255
References: http://apps.gehealthcare.com/servlet/ClientServlet/2337093-100.pdf?REQ=RAA&DIRECTION=2337093-100&FILENAME=2337093-100.pdf&FILEREV=1&DOCREV_ORG=1, http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/, https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CWE: CWE-255
CVE-2003-1108
The Session Initiation Protocol (SIP) implementation in Alcatel OmniPCX Enterprise 5.0 Lx allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: omnipcx
References: http://www.cert.org/advisories/CA-2003-06.html, http://www.ee.oulu.fi/research/ouspg/protos/testing/c07/sip/, http://www.kb.cert.org/vuls/id/528719
CVE-2003-1586
Cross-site scripting (XSS) vulnerability in WebExpert allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: webexpert
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://www.securityfocus.com/archive/1/313867, https://exchange.xforce.ibmcloud.com/vulnerabilities/56646, http://www.securityfocus.com/archive/1/313867
CWE: CWE-79
CVE-2003-0486
SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=105607263130644&w=2, http://www.phpbb.com/phpBB/viewtopic.php?t=112052, http://www.securityfocus.com/bid/7979
CVE-2003-1257
find_theni_home.php in E-theni allows remote attackers to obtain sensitive system information via a URL request which executes phpinfo.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: e-theni
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0009.html, http://www.iss.net/security_center/static/11012.php, http://www.securityfocus.com/archive/1/305381
CVE-2003-0455
The imagemagick libmagick library 5.5 and earlier creates temporary files insecurely, which allows local users to create or overwrite arbitrary files.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: libmagick_library
References: http://marc.info/?l=bugtraq&m=105786393628728&w=2, http://www.debian.org/security/2003/dsa-331, http://www.redhat.com/support/errata/RHSA-2004-494.html
CVE-2003-0021
The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: eterm
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html, http://marc.info/?l=bugtraq&m=104612710031920&w=2, http://www.iss.net/security_center/static/11413.php
CVE-2003-1029
The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_print to use a bad length value when calling print_octets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tcpdump
References: http://lwn.net/Alerts/66805/, http://marc.info/?l=bugtraq&m=107193841728533&w=2, http://marc.info/?l=bugtraq&m=107213553214985&w=2
CVE-2003-1330
Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom "on strip unsuccessful" hooks, which allows remote attackers to bypass e-mail attachment filtering policies via an attachment that MAILsweeper can detect but not remove.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: all_windows, mailsweeper
References: http://www.mimesweeper.com/download/bin/Patches/MAILsweeper_Patches_301_ReadMe.htm, http://www.securityfocus.com/bid/7226, https://exchange.xforce.ibmcloud.com/vulnerabilities/11745
CVE-2003-1163
hash.c in Ganglia gmond 2.5.3 allows remote attackers to cause a denial of service (segmentation fault) via a UDP packet that contains a single-byte name string, which is used as an out-of-bounds array index.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gmond
References: http://ganglia.sourceforge.net/, http://secunia.com/advisories/10166, http://www.osvdb.org/2787
CVE-2003-1294
Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: xscreensaver
References: ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc, http://jwz.livejournal.com/310943.html, http://secunia.com/advisories/20224
CVE-2003-0725
Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: helix_universal_server, realserver
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0087.html, http://lists.immunitysec.com/pipermail/dailydave/2003-August/000030.html, http://www.kb.cert.org/vuls/id/934932
CVE-2003-1210
Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to the getit function or the (2) min parameter to the search function.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://archives.neohapsis.com/archives/bugtraq/2003-05/0147.html, http://www.securityfocus.com/bid/7588, https://exchange.xforce.ibmcloud.com/vulnerabilities/11984
CVE-2003-1157
Cross-site scripting (XSS) vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inject arbitrary web script or HTML via the NFuse_Message parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: metaframe
References: http://secunia.com/advisories/10127, http://www.osvdb.org/2762, http://www.securityfocus.com/archive/1/343040
CVE-2003-0664
Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: works, word
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-035, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A188, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-035
CVE-2003-1284
Sambar Server before 6.0 beta 6 allows remote attackers to obtain sensitive information via direct requests to the default scripts (1) environ.pl and (2) testcgi.exe.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sambar_server
References: http://secunia.com/advisories/9578, http://securitytracker.com/id?1007819, http://www.idefense.com/application/poi/display?id=103&type=vulnerabilities&flashstatus=true
CVE-2003-1120
Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the server's private key.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: tectia_server
References: http://secunia.com/advisories/11193, http://securitytracker.com/alerts/2004/Mar/1009532.html, http://www.kb.cert.org/vuls/id/814198
CVE-2003-1341
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: virus_buster, officescan
Related CWEs: CWE-16
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html, http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13353, http://secunia.com/advisories/7881
CWE: CWE-16
CVE-2003-5002
A vulnerability was found in ISS BlackICE PC Protection. It has been declared as problematic. Affected by this vulnerability is the component Update Handler which allows cleartext transmission of data. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS v3.1 Score: 3.7 (LOW)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: iss_blackice_pc_protection
Related CWEs: CWE-319
Related CAPECs: CAPEC-383, CAPEC-102, CAPEC-477
MITRE ATT&CK Techniques: T1056.004, T1040
MITRE ATT&CK Tactics: T1056
References: https://vuldb.com/?id.295, https://vuldb.com/?id.295
CWE: CWE-319
MITRE ATT&CK techniques: T1056.004, T1040
MITRE ATT&CK tactics: T1056
CVE-2003-0589
admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: digi-news
References: http://marc.info/?l=bugtraq&m=105839007002993&w=2, http://marc.info/?l=bugtraq&m=105839007002993&w=2
CVE-2003-0491
The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tutorials
References: http://marc.info/?l=vuln-dev&m=105577873506147&w=2, http://marc.info/?l=vuln-dev&m=105577873506147&w=2, http://marc.info/?l=vuln-dev&m=105577873506147&w=2
CVE-2003-1274
Winamp 3.0 allows remote attackers to cause a denial of service (crash) via .b4s file with a file: argument to the Playstring parameter that contains MS-DOS device names such as aux.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: winamp
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0025.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/10983, http://archives.neohapsis.com/archives/bugtraq/2003-01/0025.html
CVE-2003-0282
Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: unzip, openlinux_workstation, openlinux_server
References: ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-031.0.txt, ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-031.0.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000672
CVE-2003-1056
The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://secunia.com/advisories/10411, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57443-1, http://www.auscert.org.au/render.html?it=3688
CVE-2003-1186
Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to execute arbitrary code via a long HTTP Referer header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: simplewebserver
References: http://www.osvdb.org/10101, http://www.securityfocus.com/archive/1/342785, http://www.securityfocus.com/bid/8925
CVE-2003-0746
Various Distributed Computing Environment (DCE) implementations, including HP OpenView, allow remote attackers to cause a denial of service (process hang or termination) via certain malformed inputs, as triggered by attempted exploits against the vulnerabilities CVE-2003-0352 or CVE-2003-0605, such as the Blaster/MSblast/LovSAN worm.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openview
References: ftp://patches.sgi.com/support/free/security/advisories/20030902-01-P, http://archives.neohapsis.com/archives/hp/2003-q3/0042.html, http://www.kb.cert.org/vuls/id/377804
CVE-2003-0167
Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a specially crafted mail folder, a different vulnerability than CVE-2003-0140.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mutt
References: http://www.debian.org/security/2003/dsa-274, http://www.debian.org/security/2003/dsa-300, http://www.securityfocus.com/bid/7229
CVE-2003-1536
Multiple cross-site scripting (XSS) vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to inject arbitrary web script or HTML via (1) the q parameter to search.php and (2) the year parameter to calendar.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: dcp-portal
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html, http://secunia.com/advisories/8358, http://www.osvdb.org/7021
CWE: CWE-79
CVE-2003-0028
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aix, hp-ux_series_700, hp-ux, openbsd, unicos
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-008.txt.asc, http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0140.html, http://marc.info/?l=bugtraq&m=104810574423662&w=2
CVE-2003-1079
Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service (memory consumption) via certain arguments in RPC calls that cause large amounts of memory to be allocated.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos, solaris
References: http://secunia.com/advisories/8092/, http://sunsolve.sun.com/search/document.do?assetkey=1-26-50626-1, http://www.securityfocus.com/bid/6883
CVE-2003-0619
Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (kernel panic) via a negative size value within XDR data of an NFSv3 procedure call.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://marc.info/?l=bugtraq&m=105950927708272&w=2, http://www.debian.org/security/2004/dsa-358, http://www.redhat.com/support/errata/RHSA-2003-198.html
CVE-2003-1254
Active PHP Bookmarks (APB) 1.1.01 allows remote attackers to execute arbitrary PHP code via (1) head.php, (2) apb_common.php, or (3) apb_view_class.php by modifying the APB_SETTINGS parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: active_php_bookmarks
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0049.html, http://www.iss.net/security_center/static/11010.php, http://www.securityfocus.com/bid/6545
CVE-2003-1377
Buffer overflow in the reverse DNS lookup of Smart IRC Daemon (SIRCD) 0.4.0 and 0.4.4 allows remote attackers to execute arbitrary code via a client with a long hostname.
CVSS v2.0 Score: 8.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:C
Affected Products: sircd
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://www.securityfocus.com/archive/1/312924, http://www.securityfocus.com/bid/6924, https://exchange.xforce.ibmcloud.com/vulnerabilities/11409
CWE: CWE-119
CVE-2003-0604
Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File:// URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_media_player
References: http://marc.info/?l=bugtraq&m=105899261818572&w=2, http://marc.info/?l=bugtraq&m=105906867322856&w=2, http://marc.info/?l=ntbugtraq&m=105899408520292&w=2
CVE-2003-0576
Unknown vulnerability in the NFS daemon (nfsd) in SGI IRIX 6.5.19f and earlier allows remote attackers to cause a denial of service (kernel panic) via certain packets that cause XDR decoding errors, a different vulnerability than CVE-2003-0619.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20030801-01-P, ftp://patches.sgi.com/support/free/security/advisories/20030801-02-P, ftp://patches.sgi.com/support/free/security/advisories/20030801-01-P
CVE-2003-1093
BEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inaccessible, may leak the user's password when it throws a ResourceAllocationException.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: weblogic_server
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-24.jsp, http://www.kb.cert.org/vuls/id/331937, http://www.securityfocus.com/bid/6586
CVE-2003-1112
The Session Initiation Protocol (SIP) implementation in Ingate Firewall and Ingate SIParator before 3.1.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ingate_firewall, ingate_siparator
References: http://www.cert.org/advisories/CA-2003-06.html, http://www.ee.oulu.fi/research/ouspg/protos/testing/c07/sip/, http://www.kb.cert.org/vuls/id/528719
CVE-2003-0244
The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service (CPU consumption) via packets with forged source addresses that cause a large number of hash table collisions.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0073.html, http://marc.info/?l=bugtraq&m=105301461726555&w=2, http://marc.info/?l=bugtraq&m=105595901923063&w=2
CVE-2003-1479
Cross-site scripting (XSS) vulnerability in webcamXP 1.02.432 and 1.02.535 allows remote attackers to inject arbitrary web script or HTML via the message field.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: webcam_xp
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://securityreason.com/securityalert/3304, http://www.frame4.com/content/advisories/FSA-2003-002.txt, http://www.securityfocus.com/archive/1/320345
CWE: CWE-79
CVE-2003-0450
Cistron RADIUS daemon (radiusd-cistron) 1.6.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large value in an NAS-Port attribute, which is interpreted as a negative number and causes a buffer overflow.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: radius_daemon
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=196063, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000664, http://www.debian.org/security/2003/dsa-321
CVE-2003-1003
Cisco PIX firewall 5.x.x, and 6.3.1 and earlier, allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is set.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: pix_firewall_software, pix_firewall
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://www.cisco.com/warp/public/707/cisco-sa-20031215-pix.shtml, http://www.cisco.com/warp/public/707/cisco-sa-20031215-pix.shtml
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2003-1026
Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the "Travel Log Cross Domain Vulnerability."
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: ie, internet_explorer
Related CWEs: CWE-264
References: http://marc.info/?l=bugtraq&m=106979349517578&w=2, http://marc.info/?l=bugtraq&m=107038202225587&w=2, http://www.kb.cert.org/vuls/id/784102
CWE: CWE-264
CVE-2003-0565
Multiple vulnerabilities in multiple vendor implementations of the X.400 protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an X.400 message containing certain unexpected ASN.1 constructs, as demonstrated using the NISSC test suite.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
References: http://www.kb.cert.org/vuls/id/927278, http://www.uniras.gov.uk/vuls/2003/006489/x400.htm, http://www.kb.cert.org/vuls/id/927278
CVE-2003-0585
SQL injection vulnerability in login.asp of Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to bypass authentication and execute arbitrary SQL code via the (1) user or (2) pass parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: estore
References: http://marc.info/?l=bugtraq&m=105845898003616&w=2, http://marc.info/?l=bugtraq&m=105845898003616&w=2
CVE-2003-0665
Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: access
References: http://secunia.com/advisories/9668, http://www.kb.cert.org/vuls/id/992132, http://www.securityfocus.com/bid/8536
CVE-2003-0949
xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xsok
References: http://www.debian.org/security/2003/dsa-405, http://www.securityfocus.com/bid/9321, https://exchange.xforce.ibmcloud.com/vulnerabilities/14098
CVE-2003-0707
Buffer overflow in LinuxNode (node) before 0.3.2 allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linuxnode
References: http://www.debian.org/security/2003/dsa-375, http://www.debian.org/security/2003/dsa-375
CVE-2003-0791
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mozilla, openserver
Related CWEs: CWE-502
Related CAPECs: CAPEC-586
References: http://secunia.com/advisories/11103/, http://www.mandriva.com/security/advisories?name=MDKSA-2004:021, http://www.osvdb.org/8390
CWE: CWE-502
CVE-2003-0061
Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://www.idefense.com/application/poi/display?id=87&type=vulnerabilities&flashstatus=true, http://www.idefense.com/application/poi/display?id=87&type=vulnerabilities&flashstatus=true
CVE-2003-0215
SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via the (1) username and (2) password fields, and possibly other fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bttlxeforum
References: http://marc.info/?l=bugtraq&m=105120052725940&w=2, http://securitytracker.com/id?1006632, http://www.battleaxesoftware.com/forums/forum.asp?forumid=36&select=1812
CVE-2003-1194
Cross-site scripting (XSS) vulnerability in Booby .1 through 0.2.3 allows remote attackers to inject arbitrary web script or HTML via the error message.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: booby
References: http://secunia.com/advisories/10110, http://securitytracker.com/id?1008056, http://sourceforge.net/project/shownotes.php?release_id=193878
CVE-2003-0551
The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which could allow attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux
References: http://www.debian.org/security/2004/dsa-358, http://www.debian.org/security/2004/dsa-423, http://www.redhat.com/support/errata/RHSA-2003-198.html
CVE-2003-1024
Unknown vulnerability in the ls-F builtin function in tcsh on Solaris 8 allows local users to create or delete files as other users, and gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://secunia.com/advisories/10486, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57455, http://www.kb.cert.org/vuls/id/281356
CVE-2003-0042
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tomcat
References: http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/, http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt, http://marc.info/?l=bugtraq&m=104394568616290&w=2
CVE-2003-0906
Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code via a malformed WMF or EMF image.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt, windows_xp
References: http://www.kb.cert.org/vuls/id/547028, http://www.securityfocus.com/bid/10120, http://www.us-cert.gov/cas/techalerts/TA04-104A.html
CVE-2003-0680
Unknown vulnerability in NFS for SGI IRIX 6.5.21 and earlier may allow an NFS client to bypass read-only restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20030901-01-P, ftp://patches.sgi.com/support/free/security/advisories/20030901-01-P
CVE-2003-0210
Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: secure_access_control_server
References: http://marc.info/?l=bugtraq&m=105120066126196&w=2, http://marc.info/?l=ntbugtraq&m=105118056332344&w=2, http://www.cisco.com/warp/public/707/cisco-sa-20030423-ACS.shtml
CVE-2003-1126
Unknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows remote attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: one_web_server
References: http://secunia.com/advisories/9541, http://sunsolve.sun.com/search/document.do?assetkey=1-26-56180-1, http://www.kb.cert.org/vuls/id/636964
CVE-2003-0399
Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by setting the vgn_creds cookie to an arbitrary value and directly accessing the save template.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: vignette, storyserver, content_suite
References: http://marc.info/?l=bugtraq&m=105405874325673&w=2, http://www.iss.net/security_center/static/12076.php, http://www.s21sec.com/es/avisos/s21sec-017-en.txt
CVE-2003-0181
Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the s_Validation form with a long, unknown parameter name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: lotus_domino_web_server
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0086.html, http://www-1.ibm.com/support/docview.wss?uid=swg21104528, http://www.cert.org/advisories/CA-2003-11.html
CVE-2003-0929
Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailsweeper
References: http://marc.info/?l=bugtraq&m=109241692108678&w=2, http://www.corsaire.com/advisories/c030807-001.txt, http://marc.info/?l=bugtraq&m=109241692108678&w=2
CVE-2003-0655
rscsi in cdrtools 2.01 and earlier allows local users to overwrite arbitrary files and gain root privileges by specifying the target file as a command line argument, which is modified while rscsi is running with privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cdrtools
References: http://marc.info/?l=bugtraq&m=105978381618095&w=2, http://www.secnetops.com/research/advisories/SRT2003-08-01-0126.txt, http://marc.info/?l=bugtraq&m=105978381618095&w=2
CVE-2003-0277
Directory traversal vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the file parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: happymall
References: http://marc.info/?l=bugtraq&m=105276130814262&w=2, http://www.securityfocus.com/bid/7559, https://exchange.xforce.ibmcloud.com/vulnerabilities/11987
CVE-2003-1364
Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service (crash) via an HTTP GET message with empty (1) Connection or (2) Range fields.
CVSS v2.0 Score: 8.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:C
Affected Products: abyss_web_server
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://archives.neohapsis.com/archives/bugtraq/2003-04/0095.html, http://www.securityfocus.com/bid/7287, https://exchange.xforce.ibmcloud.com/vulnerabilities/11718
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2003-0690
KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kde
References: http://cert.uni-stuttgart.de/archive/suse/security/2002/12/msg00101.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000747, http://marc.info/?l=bugtraq&m=106374551513499&w=2
CVE-2003-1424
message.php in Petitforum does not properly authenticate users, which allows remote attackers to impersonate forum users via a modified connect cookie.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: petitforum
Related CWEs: CWE-255
References: http://securitytracker.com/id?1006117, https://exchange.xforce.ibmcloud.com/vulnerabilities/11359, http://securitytracker.com/id?1006117
CWE: CWE-255
CVE-2003-0223
Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in Microsoft Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to embed a URL containing script in a redirection message.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, internet_information_services
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-018, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A66, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-018
CVE-2003-1201
ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service (segmentation fault).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openldap
Related CWEs: CWE-824
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000685, http://secunia.com/advisories/11261, http://secunia.com/advisories/9203
CWE: CWE-824
CVE-2003-1494
Unspecified vulnerability in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (CPU consumption) via a crafted TCP packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openview_network_node_manager
Related CWEs: CWE-399, CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://archives.neohapsis.com/archives/hp/2003-q4/0019.html, http://www.securityfocus.com/bid/8859, https://exchange.xforce.ibmcloud.com/vulnerabilities/13467
CWE: CWE-399, CWE-119
CVE-2003-1041
Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm extension.  NOTE: this bug may overlap CVE-2004-0475.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ie, internet_explorer
References: http://www.kb.cert.org/vuls/id/187196, http://www.securityfocus.com/archive/1/348521, http://www.securityfocus.com/bid/9320
CVE-2003-1002
Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is set.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: catalyst_6500_ws-svc-nam-1, catalyst_7600_ws-x6380-nam, catalyst_6500_ws-x6380-nam, catos, firewall_services_module
References: http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml, http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml
CVE-2003-0142
Adobe Acrobat Reader (acroread) 6, under certain circumstances when running with the "Certified plug-ins only" option disabled, loads plug-ins with signatures used for older versions of Acrobat, which can allow attackers to cause Acrobat to enter Certified mode and run untrusted plugins by modifying the CTIsCertifiedMode function.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: acrobat_reader
References: http://www.kb.cert.org/vuls/id/689835, http://www.securityfocus.com/archive/1/328224, http://www.kb.cert.org/vuls/id/689835
CVE-2003-1271
Cross-site scripting vulnerability (XSS) in AN HTTP 1.41e allows remote attackers to execute arbitrary web script or HTML as other users via a URL containing the script.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: an-http
References: http://www.iss.net/security_center/static/10977.php, http://www.securityfocus.com/archive/1/305234, http://www.securityfocus.com/bid/6529
CVE-2003-0860
Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: php
References: http://www.php.net/ChangeLog-4.php#4.3.3, http://www.php.net/release_4_3_3.php, http://www.php.net/ChangeLog-4.php#4.3.3
CVE-2003-1285
Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server before 6.0 beta 6 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) isapi/testisa.dll, (2) testcgi.exe, (3) environ.pl, (4) the query parameter to samples/search.dll, (5) the price parameter to mortgage.pl, (6) the query string in dumpenv.pl, (7) the query string to dumpenv.pl, and (8) the E-Mail field of the guestbook script (book.pl).
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: sambar_server
References: http://secunia.com/advisories/9578, http://securitytracker.com/id?1007819, http://www.idefense.com/application/poi/display?id=103&type=vulnerabilities&flashstatus=true
CVE-2003-1573
The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary programs, conduct a denial of service, and obtain sensitive information via a crafted SQL statement, related to "inadequate security settings and library bugs in sun.* and org.apache.* packages."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: j2ee
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://archives.neohapsis.com/archives/bugtraq/2004-01/0148.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0675.html, http://seclists.org/bugtraq/2003/Dec/0249.html
CWE: CWE-89
CVE-2003-0295
Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capability.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: vbulletin
References: http://marc.info/?l=bugtraq&m=105292832607981&w=2, http://marc.info/?l=bugtraq&m=105293890422210&w=2, http://marc.info/?l=bugtraq&m=105292832607981&w=2
CVE-2003-1036
Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code via long (1) ~command, (2) ~runtimemode, or (3) ~session parameters, or (4) a long HTTP Content-Type header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_transaction_server
References: http://www.phenoelit.de/stuff/Phenoelit20c3.pd, https://exchange.xforce.ibmcloud.com/vulnerabilities/14186, http://www.phenoelit.de/stuff/Phenoelit20c3.pd
CVE-2003-1411
PHP remote file inclusion vulnerability in emailreader_execute_on_each_page.inc.php in Cedric Email Reader 0.4 allows remote attackers to execute arbitrary PHP code via the emailreader_ini parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: cedric_email_reader
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://secunia.com/advisories/8024, http://www.osvdb.org/5900, http://www.securityfocus.com/archive/1/311173
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2003-1473
Buffer overflow in LTris 1.0.1 of FreeBSD Ports Collection 2003-02-25 and earlier allows local users to execute arbitrary code with gid "games" permission via a long HOME environment variable.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ltris
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2003-05/0122.html, http://www.securityfocus.com/archive/1/321001, http://www.securityfocus.com/bid/7537
CWE: CWE-119
CVE-2003-0296
The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: evolution
References: http://marc.info/?l=bugtraq&m=105294024124163&w=2, http://marc.info/?l=bugtraq&m=105294024124163&w=2
CVE-2003-0930
Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded files, which allows remote attackers to bypass intended policy.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailsweeper
References: http://marc.info/?l=bugtraq&m=109241692108678&w=2, http://www.corsaire.com/advisories/c030807-001.txt, http://marc.info/?l=bugtraq&m=109241692108678&w=2
CVE-2003-1096
The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, which makes it easier for remote attackers to gain privileges via brute force password guessing attacks.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: leap
References: http://marc.info/?l=bugtraq&m=108135227731965&w=2, http://www.cisco.com/warp/public/707/cisco-sn-20030802-leap.shtml, http://www.kb.cert.org/vuls/id/473108
CVE-2003-1595
NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netware_ftp_server, netware
Related CWEs: CWE-264
References: http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1, http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CWE: CWE-264