DuyTa/cve-kgrag-db huggingface dataset:
CVE-2003-1073
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: sunos, solaris
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0044.html, http://isec.pl/vulnerabilities/isec-0008-sun-at.txt, http://secunia.com/advisories/7960/
CVE-2003-0373
Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code via (1) a long proto argument to the scanner_add_port function, (2) a long user argument to the ftp_log_in function, (3) a long pass argument to the ftp_log_in function.
CVSS v2.0 Score: 4.4 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P
Affected Products: nessus
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://marc.info/?l=bugtraq&m=105364059803427&w=2, http://marc.info/?l=bugtraq&m=105369506714849&w=2, http://www.securityfocus.com/bid/7664
CWE: CWE-119
CVE-2003-0866
The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tomcat
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=215506, http://secunia.com/advisories/30899, http://secunia.com/advisories/30908
CVE-2003-1086
PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote attackers to execute arbitrary PHP code by modifying the pm_path parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pmachine_free, pmachine_pro
References: http://marc.info/?l=bugtraq&m=105638414205498&w=2, http://www.pmachine.com/forum/threads.php?id=7274_0_13_0_C, http://marc.info/?l=bugtraq&m=105638414205498&w=2
CVE-2003-1340
Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 5.6 and 6.5 allow remote authenticated users to execute arbitrary SQL commands via (1) a uid (user) cookie to modules.php; and allow remote attackers to execute arbitrary SQL commands via an aid (admin) cookie to the Web_Links module in a (2) viewlink, (3) MostPopular, or (4) NewLinksDate action, different vectors than CVE-2003-0279.
CVSS v2.0 Score: 6.5 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Affected Products: php-nuke
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://securityreason.com/securityalert/3185, http://www.securityfocus.com/archive/1/323425, http://www.securityfocus.com/archive/1/480866/100/0/threaded
CWE: CWE-89
CVE-2003-0782
Multiple buffer overflows in ecartis before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ecartis
References: http://www.debian.org/security/2004/dsa-467, https://exchange.xforce.ibmcloud.com/vulnerabilities/12928, http://www.debian.org/security/2004/dsa-467
CVE-2003-0220
Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: personal_firewall_2
References: http://marc.info/?l=bugtraq&m=105155734411836&w=2, http://www.coresecurity.com/common/showdoc.php?idx=314&idxseccion=10, http://www.kb.cert.org/vuls/id/454716
CVE-2003-0241
FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it untrusted, which allows remote attackers to execute arbitrary code via a message that is rendered in IE using a less secure zone.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: goldmine
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0091.html, http://www.secnap.net/security/gm001.html, http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0091.html
CVE-2003-1115
The Session Initiation Protocol (SIP) implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: succession_communication_server_2000
References: http://www.cert.org/advisories/CA-2003-06.html, http://www.ee.oulu.fi/research/ouspg/protos/testing/c07/sip/, http://www.kb.cert.org/vuls/id/528719
CVE-2003-0757
Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemote requests to TCP ports 256 or 264, which leaks the IP addresses in a reply packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: firewall-1
References: http://archives.neohapsis.com/archives/bugtraq/2003-09/0018.html, http://archives.neohapsis.com/archives/bugtraq/2003-09/0018.html
CVE-2003-1345
Directory traversal vulnerability in s.dll in WebCollection Plus 5.00 allows remote attackers to view arbitrary files in c:\ via a full pathname in the d parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webcollection_plus
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://marc.info/?l=bugtraq&m=104261317218210&w=2, http://www.securityfocus.com/bid/6574, https://exchange.xforce.ibmcloud.com/vulnerabilities/11064
CWE: CWE-22
CVE-2003-1222
BEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service (JMS) provider, echoes the password for the foreign provider to the console and stores it in cleartext in config.xml, which could allow attackers to obtain the password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: weblogic_server
References: http://dev2dev.bea.com/pub/advisory/63, http://www.securityfocus.com/bid/9034, http://dev2dev.bea.com/pub/advisory/63
CVE-2003-1264
TFTP server in Longshine Wireless Access Point (WAP) LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file (config.img) and other files without authentication.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: di-614\+, longshine_wireless_ethernet_access_point
References: http://www.iss.net/security_center/static/10997.php, http://www.securityfocus.com/archive/1/305344, http://www.securityfocus.com/archive/1/305391
CVE-2003-0765
The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: winamp
References: http://marc.info/?l=bugtraq&m=106305643432112&w=2, http://marc.info/?l=bugtraq&m=106305643432112&w=2
CVE-2003-0406
PalmVNC 1.40 and earlier stores passwords in plaintext in the PalmVNCDB, which is backed up to PCs that the Palm is synchronized with, which could allow attackers to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: palmvnc
References: http://marc.info/?l=bugtraq&m=105405691423389&w=2, http://www.iss.net/security_center/static/12083.php, http://www.securityfocus.com/bid/7696
CVE-2003-1450
BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service (segmentation fault) via a malformed RPL_NAMREPLY numeric 353 message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bitchx
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-February/003850.html, http://securityreason.com/securityalert/3279, http://www.linuxsecurity.com/content/view/104622/104/
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2003-0123
Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service (crash) via a long HTTP status line.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: lotus_domino, lotus_notes_client
References: http://marc.info/?l=bugtraq&m=104757545500368&w=2, http://www-1.ibm.com/support/docview.wss?rs=482&q=Domino&uid=swg21105060, http://www.cert.org/advisories/CA-2003-11.html
CVE-2003-1032
Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink, allows remote attackers to cause a denial of service (crash) via a malformed URL to the web server, possibly involving a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pi3web
References: http://marc.info/?l=bugtraq&m=105465813729100&w=2, http://marc.info/?l=bugtraq&m=105484265218325&w=2, http://securitytracker.com/id?1006913
CVE-2003-1529
Directory traversal vulnerability in Seagull Software Systems J Walk application server 3.2C9, and other versions before 3.3c4, allows remote attackers to read arbitrary files via a ".%252e" (encoded dot dot) in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: j_walk_application_server
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://archives.neohapsis.com/archives/bugtraq/2003-03/0357.html, http://secunia.com/advisories/8411, http://www.irmplc.com/advisory/adv5.htm
CWE: CWE-22
CVE-2003-1584
Cross-site scripting (XSS) vulnerability in SurfStats allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: surfstats
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://www.securityfocus.com/archive/1/313867, https://exchange.xforce.ibmcloud.com/vulnerabilities/56649, http://www.securityfocus.com/archive/1/313867
CWE: CWE-79
CVE-2003-0101
miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: usermin, guardian_digital_webtool, webmin
References: ftp://patches.sgi.com/support/free/security/advisories/20030602-01-I, http://archives.neohapsis.com/archives/hp/2003-q1/0063.html, http://archives.neohapsis.com/archives/linux/engarde/2003-q1/0008.html
CVE-2003-1325
The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) via a certain connection string to UDP port 27015 that represents "absence of player informations," a related issue to CVE-2006-0734.
CVSS v2.0 Score: 5.2 (MEDIUM)
CVSS v2.0 Vector: AV:A/AC:M/Au:S/C:N/I:N/A:C
Affected Products: half-life_cstrike_dedicated_server
References: http://aluigi.altervista.org/adv/csdos.txt, http://packetstormsecurity.org/0304-exploits/hl-headnut.c, http://aluigi.altervista.org/adv/csdos.txt
CVE-2003-1391
RTS CryptoBuddy 1.0 and 1.2 uses a weak encryption algorithm for the passphrase and generates predictable keys, which makes it easier for attackers to guess the passphrase.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cryptobuddy
Related CWEs: CWE-310
References: http://www.securityfocus.com/archive/1/311176, http://www.securityfocus.com/bid/6810, https://exchange.xforce.ibmcloud.com/vulnerabilities/11298
CWE: CWE-310
CVE-2003-0066
The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: rxvt
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html, http://marc.info/?l=bugtraq&m=104612710031920&w=2, http://www.iss.net/security_center/static/11414.php
CVE-2003-0772
Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ws_ftp_server
References: http://marc.info/?l=bugtraq&m=106288825902868&w=2, http://secunia.com/advisories/9671, http://www.kb.cert.org/vuls/id/219140
CVE-2003-0148
The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that (1) obtain the database administrator username and encrypted password in a configuration file from the ePO server using a certain request, (2) crack the password due to weak cryptography, and (3) use the password to pass commands through xp_cmdshell.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: epolicy_orchestrator
References: http://www.atstake.com/research/advisories/2003/a073103-1.txt, http://www.nai.com/us/promos/mcafee/epo_vulnerabilities.asp, http://www.atstake.com/research/advisories/2003/a073103-1.txt
CVE-2003-0019
uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://www.ciac.org/ciac/bulletins/n-044.shtml, http://www.iss.net/security_center/static/11276.php, http://www.kb.cert.org/vuls/id/134025
CVE-2003-0405
Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or cookie which is processed in the NEEDS command, or (2) an HTTP Referrer that is processed in the VALID_PATHS command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: vignette, storyserver, content_suite
References: http://marc.info/?l=bugtraq&m=105405922826197&w=2, http://www.iss.net/security_center/static/12070.php, http://www.s21sec.com/es/avisos/s21sec-024-en.txt
CVE-2003-1237
Cross-site scripting vulnerability (XSS) in WWWBoard 2.0A2.1 and earlier allows remote attackers to inject arbitrary HTML or web script via a message post.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: wwwboard
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0274.html, http://www.iss.net/security_center/static/11383.php, http://www.securityfocus.com/bid/6918
CVE-2003-0996
Unknown "System Security Vulnerability" in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 allows attackers to gain privileges via the help interface.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: unicenter_remote_control_host
References: http://support.ca.com/techbases/rp/urc6x-secnote.html, http://www.secunia.com/advisories/10420/, http://support.ca.com/techbases/rp/urc6x-secnote.html
CVE-2003-0987
mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: http_server
References: http://marc.info/?l=bugtraq&m=108437852004207&w=2, http://security.gentoo.org/glsa/glsa-200405-22.xml, http://securitytracker.com/id?1008920
CVE-2003-1034
The RPM installation of SAP DB 7.x creates the (1) dbmsrv or (2) lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sap_db
References: http://marc.info/?l=bugtraq&m=104914778303805&w=2, http://www.securityfocus.com/bid/7242, https://exchange.xforce.ibmcloud.com/vulnerabilities/11669
CVE-2003-1515
Origo ASR-8100 ADSL Router 3.21 has an administration service running on port 254 that does not require a password, which allows remote attackers to cause a denial of service by restoring the factory defaults.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: asr-8100, asr-8400
Related CWEs: CWE-264
References: http://securityreason.com/securityalert/3300, http://www.securityfocus.com/archive/1/341752, http://www.securityfocus.com/bid/8855
CWE: CWE-264
CVE-2003-0905
Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remote attackers to cause a denial of service (disallowing new connections) via a certain sequence of TCP/IP packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_media_services
References: http://www.kb.cert.org/vuls/id/982630, http://www.securityfocus.com/bid/9825, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-008
CVE-2003-0496
Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_2000_terminal_services
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0013.html, http://marc.info/?l=bugtraq&m=105820282607865&w=2, http://marc.info/?l=bugtraq&m=105830986720243&w=2
CVE-2003-0464
The RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow local users to bind to UDP ports that are used by privileged services such as nfsd.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux
References: http://www.redhat.com/support/errata/RHSA-2003-238.html, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A311, http://www.redhat.com/support/errata/RHSA-2003-238.html
CVE-2003-0057
Multiple buffer overflows in Hypermail 2 before 2.1.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code (1) via a long attachment filename that is not properly handled by the hypermail executable, or (2) by connecting to the mail CGI program from an IP address that reverse-resolves to a long hostname.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hypermail
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0042.html, http://marc.info/?l=bugtraq&m=104369136703903&w=2, http://secunia.com/advisories/8030
CVE-2003-1429
Buffer overflow in Proxomitron Naoko 4.4 allows remote attackers to execute arbitrary code via a long request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: proxomitron_naoko
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0088.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/11364, http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0088.html
CWE: CWE-119
CVE-2003-1042
SQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and earlier allows remote authenticated users with editproducts privileges to execute arbitrary SQL via the product name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bugzilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=214290, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774, http://www.securityfocus.com/archive/1/343185
CVE-2003-0236
Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subject or (2) Date headers.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: icq
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html, http://marc.info/?l=bugtraq&m=105216842131995&w=2, http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
CVE-2003-1305
Microsoft Internet Explorer allows remote attackers to cause a denial of service (resource consumption) via a Javascript src attribute that recursively loads the current web page.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_explorer
References: http://archive.cert.uni-stuttgart.de/archive/bugtraq/2003/07/msg00068.html, http://www.osvdb.org/2291, http://archive.cert.uni-stuttgart.de/archive/bugtraq/2003/07/msg00068.html
CVE-2003-1149
Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked site, which is displayed on the blocked sites error page.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: norton_internet_security
References: http://secunia.com/advisories/10067, http://securityresponse.symantec.com/avcenter/security/Content/2003.10.27.html, http://www.osvdb.org/2714
CVE-2003-1104
Buffer overflow in IBM Tivoli Firewall Toolbox (TFST) 1.2 allows remote attackers to execute arbitrary code via unknown vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tivoli_firewall_toolbox
References: http://archives.neohapsis.com/archives/bugtraq/2003-03/0307.html, http://secunia.com/advisories/8349, http://www.kb.cert.org/vuls/id/210937
CVE-2003-1319
Multiple buffer overflows in SmartFTP 1.0.973, and other versions before 1.0.976, allow remote attackers to execute arbitrary code via (1) a long response to a PWD command, which triggers a stack-based overflow, and (2) a long line in a response to a file LIST command, which triggers a heap-based overflow.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: smartftp
References: http://archives.neohapsis.com/archives/bugtraq/2003-06/0083.html, http://secunia.com/advisories/8998, http://security.nnov.ru/docs4679.html
CVE-2003-1231
Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 5.5 allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: ecw-shop
References: http://secunia.com/advisories/10458, http://securitytracker.com/id?1008522, http://www.securiteam.com/unixfocus/6D00F2A95C.html
CVE-2003-1291
VMware ESX Server 1.5.2 before Patch 4 allows local users to execute arbitrary programs as root via certain modified VMware ESX Server environment variables.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: esx
References: http://www.osvdb.org/21585, http://www.vmware.com/download/esx/esx152-patch4.html, http://www.vmware.com/support/kb/enduser/std_adp.php?p_sid=dsxk%2ABWh&p_lva=&p_faqid=1108
CVE-2003-1245
index2.php in Mambo 4.0.12 allows remote attackers to gain administrator access via a URL request where session_id is set to the MD5 hash of a session cookie.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mambo_site_server
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0302.html, http://www.securityfocus.com/bid/6926, https://exchange.xforce.ibmcloud.com/vulnerabilities/11398
CVE-2003-0166
Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000691, http://marc.info/?l=bugtraq&m=104869828526885&w=2, http://marc.info/?l=bugtraq&m=104878100719467&w=2
CVE-2003-0694
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix, linux, sendmail_switch, mac_os_x_server, hp-ux
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.11/SCOSA-2004.11.txt, http://archives.neohapsis.com/archives/fulldisclosure/2003-q3/4119.html, http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0113.html
CVE-2003-0420
Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the account running the tool.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x_server
References: http://secunia.com/advisories/9025/, http://www.auscert.org.au/render.html?it=3165, http://www.kb.cert.org/vuls/id/JPLA-5NTL8E
CVE-2003-0652
Buffer overflow in xtokkaetama allows local users to gain privileges via a long -nickname command line argument, a different vulnerability than CVE-2003-0611.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xtokkaetama
References: http://marc.info/?l=bugtraq&m=106001473329625&w=2, http://www.debian.org/security/2003/dsa-367, http://marc.info/?l=bugtraq&m=106001473329625&w=2
CVE-2003-1125
Unknown vulnerability in ns-ldapd for Sun ONE Directory Server 4.16, 5.0, and 5.1 allows LDAP clients to cause a denial of service (service halt).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: one_directory_server
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-52102-1, http://www.kb.cert.org/vuls/id/195644, http://sunsolve.sun.com/search/document.do?assetkey=1-26-52102-1
CVE-2003-0961
Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000796, http://isec.pl/papers/linux_kernel_do_brk.pdf, http://marc.info/?l=bugtraq&m=107064798706473&w=2
CVE-2003-0510
Format string vulnerability in ezbounce 1.0 through 1.50 allows remote attackers to execute arbitrary code via the "sessions" command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ezbounce
References: http://druglord.freelsd.org/ezbounce/, http://marc.info/?l=bugtraq&m=105709355110281&w=2, http://druglord.freelsd.org/ezbounce/
CVE-2003-0030
Buffer overflows in protegrity.dll of Protegrity Secure.Data Extension Feature (SEF) before 2.2.3.9 allow attackers with SQL access to execute arbitrary code via the extended stored procedures (1) xp_pty_checkusers, (2) xp_pty_insert, or (3) xp_pty_select.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure.data
References: http://marc.info/?l=bugtraq&m=104758650516677&w=2, http://secunia.com/advisories/8294, http://www.kb.cert.org/vuls/id/247545
CVE-2003-0797
Unknown vulnerability in rpc.mountd in SGI IRIX 6.5 through 6.5.22 allows remote attackers to cause a denial of service (process death) via unknown attack vectors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20031102-01-P.asc, ftp://patches.sgi.com/support/free/security/advisories/20031102-02-P.asc, http://www.osvdb.org/8520
CVE-2003-1193
Multiple SQL injection vulnerabilities in the Portal DB (1) List of Values (LOVs), (2) Forms, (3) Hierarchy, and (4) XML components packages in Oracle Oracle9i Application Server 9.0.2.00 through 3.0.9.8.5 allow remote attackers to execute arbitrary SQL commands via the URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: application_server_portal, oracle9i
References: http://otn.oracle.com/deploy/security/pdf/2003alert61.pdf, http://www.securityfocus.com/archive/1/343520, http://www.securityfocus.com/bid/8966
CVE-2003-0945
The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sap_db
References: http://www.atstake.com/research/advisories/2003/a111703-2.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/13774, http://www.atstake.com/research/advisories/2003/a111703-2.txt
CVE-2003-0876
Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have less restrictive permissions than intended.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mac_os_x_server, mac_os_x
References: http://www.atstake.com/research/advisories/2003/a102803-1.txt, http://www.securityfocus.com/bid/8916, http://www.securityfocus.com/bid/8917
CVE-2003-0831
ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files.
CVSS v2.0 Score: 9.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Affected Products: proftpd
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012072.html, http://marc.info/?l=bugtraq&m=106441655617816&w=2, http://marc.info/?l=bugtraq&m=106606885611269&w=2
CWE: CWE-119
CVE-2003-0198
Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.apple.com/mhonarc/security-announce/msg00028.html, http://lists.apple.com/mhonarc/security-announce/msg00028.html
CVE-2003-0701
Buffer overflow in Internet Explorer 6 SP1 for certain languages that support double-byte encodings (e.g., Japanese) allows remote attackers to execute arbitrary code via the Type property of an Object tag, a variant of CVE-2003-0344.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ie, internet_explorer
References: http://marc.info/?l=bugtraq&m=106148101210479&w=2, http://www.kb.cert.org/vuls/id/334928, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-032
CVE-2003-0630
Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator (atari800) before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrated with the -osa_rom argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: atari800
References: http://marc.info/?l=bugtraq&m=106252128221901&w=2, http://www.debian.org/security/2003/dsa-359, http://marc.info/?l=bugtraq&m=106252128221901&w=2
CVE-2003-0870
Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: opera_browser
Related CWEs: CWE-787
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0016.html, http://www.atstake.com/research/advisories/2003/a102003-1.txt, http://www.securityfocus.com/bid/8853
CWE: CWE-787
CVE-2003-0487
Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parameter in the do_subscribe module, (2) a long folder parameter in the add_acl module, (3) a long folder parameter in the list module, and (4) a long user parameter in the do_map module.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: kerio_mailserver
References: http://marc.info/?l=bugtraq&m=105596982503760&w=2, http://nautopia.org/vulnerabilidades/kerio_mailserver.htm, http://www.securityfocus.com/bid/7967
CVE-2003-1474
slashem-tty in the FreeBSD Ports Collection is installed with write permissions for the games group, which allows local users with group games privileges to modify slashem-tty and execute arbitrary code as other users, as demonstrated using a separate vulnerability in LTris.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slashem-tty
Related CWEs: CWE-264
References: http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2003-05/0122.html, http://www.iss.net/security_center/static/11979.php, http://www.securityfocus.com/archive/1/321001
CWE: CWE-264
CVE-2003-1292
PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbitrary remote files via a URL in the pathtoashnews parameter to (1) ashnews.php and (2) ashheadlines.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ashnews
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0969.html, http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0979.html, http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0980.html
CVE-2003-0978
Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious keyserver to cause a denial of service (crash) and possibly execute arbitrary code during key retrieval.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: privacy_guard
References: http://marc.info/?l=bugtraq&m=107047470625214&w=2, http://www.novell.com/linux/security/advisories/2003_048_gpg.html, http://www.s-quadra.com/advisories/Adv-20031203.txt
CVE-2003-0981
FreeScripts VisitorBook LE (visitorbook.pl) logs the reverse DNS name of a visiting host, which allows remote attackers to spoof the origin of their incoming requests and facilitate cross-site scripting (XSS) attacks.
CVSS v3.1 Score: 6.1 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: visitorbook_le
Related CWEs: CWE-346
Related CAPECs: CAPEC-388, CAPEC-142, CAPEC-160
MITRE ATT&CK Techniques: T1134, T1539, T1550.004
MITRE ATT&CK Tactics: T1134, T1584, T1550
References: http://marc.info/?l=bugtraq&m=107107840622493&w=2, http://www.westpoint.ltd.uk/advisories/wp-03-0001.txt, http://marc.info/?l=bugtraq&m=107107840622493&w=2
CWE: CWE-346
MITRE ATT&CK techniques: T1134, T1539, T1550.004, T1557.002, T1134.001, T1584.002, T1528
MITRE ATT&CK tactics: T1134, T1584, T1550, T1557
CVE-2003-1097
Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privileges via a long -l option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/bugtraq/2003-04/0374.html, http://www.ciac.org/ciac/bulletins/n-088.shtml, http://www.kb.cert.org/vuls/id/322540
CVE-2003-0733
Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary web script and steal authentication credentials via (1) a forward instruction to the Servlet container or (2) other vulnerabilities in the WebLogic Server console application.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: weblogic_server, liquid_data, weblogic_integration
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/SA_BEA03_36.00.jsp, http://www.securityfocus.com/bid/8357, http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/SA_BEA03_36.00.jsp
CVE-2003-0621
The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tuxedo, weblogic_server
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/advisory03_38_00.jsp, http://marc.info/?l=bugtraq&m=106762000607681&w=2, http://www.securityfocus.com/bid/8931
CVE-2003-1598
SQL injection vulnerability in log.header.php in WordPress 0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the posts variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wordpress
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://osvdb.org/show/osvdb/4610, http://seclists.org/oss-sec/2012/q1/77, http://secunia.com/advisories/8954/
CWE: CWE-89
CVE-2003-0395
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes admin_iplog.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ultimate_php_board
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://f0kp.iplus.ru/bz/024.en.txt, http://marc.info/?l=bugtraq&m=105379741528925&w=2, http://f0kp.iplus.ru/bz/024.en.txt
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2003-0465
The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux_kernel
References: http://marc.info/?l=linux-kernel&m=105796021120436&w=2, http://marc.info/?l=linux-kernel&m=105796415223490&w=2, http://www.redhat.com/support/errata/RHSA-2004-188.html
CVE-2003-1301
Sun Java Runtime Environment (JRE) 1.x before 1.4.2_11 and 1.5.x before 1.5.0_06, and as used in multiple web browsers, allows remote attackers to cause a denial of service (application crash) via deeply nested object arrays, which are not properly handled by the garbage collector and trigger invalid memory accesses.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jre
References: http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4396719, http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4944300, http://www.illegalaccess.org/exploit/ObjectStackOverflow.html
CVE-2003-0037
Buffer overflows in noffle news server 1.0.1 and earlier allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: noffle
References: http://secunia.com/advisories/7955, http://www.debian.org/security/2003/dsa-244, http://www.securityfocus.com/bid/6695
CVE-2003-1316
mod.php in eNdonesia 8.2 allows remote attackers to obtain sensitive information via a ' (quote) value in the lng parameter, which reveals the path in an error message.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: endonesia
References: http://secunia.com/advisories/9622, http://securitytracker.com/id?1007592, http://www.osvdb.org/3666
CVE-2003-1508
Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window, allows remote attackers to cause a denial of service (crash) via a long filename.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Affected Products: mirc
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://securityreason.com/securityalert/3303, http://www.irchelp.org/irchelp/mirc/exploit.html, http://www.securityfocus.com/archive/1/342179
CWE: CWE-119
CVE-2003-0336
Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a carriage return (CR) character in a spoofed "Attachment Converted:" string, which is not properly handled by Eudora.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: eudora
References: http://marc.info/?l=bugtraq&m=105362278914731&w=2, http://marc.info/?l=bugtraq&m=105362278914731&w=2
CVE-2003-1200
Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a long From parameter to Form2Raw.cgi.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mdaemon
References: http://hat-squad.com/bugreport/mdaemon-raw.txt, http://marc.info/?l=bugtraq&m=107936753929354&w=2, http://secunia.com/advisories/10512
CVE-2003-0788
Unknown vulnerability in the Internet Printing Protocol (IPP) implementation in CUPS before 1.1.19 allows remote attackers to cause a denial of service (CPU consumption from a "busy loop") via certain inputs to the IPP port (TCP 631).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cups
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=97958, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000779, http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000788
CVE-2003-0248
The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://www.debian.org/security/2003/dsa-311, http://www.debian.org/security/2003/dsa-312, http://www.debian.org/security/2003/dsa-332
CVE-2003-0629
Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScript.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: peopletools
References: http://marc.info/?l=bugtraq&m=106874146204158&w=2, http://marc.info/?l=bugtraq&m=106874146204158&w=2
CVE-2003-1000
xchat 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an invalid ID number, which causes a null dereference.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: xchat
Related CWEs: CWE-476
References: http://mail.nl.linux.org/xchat-announce/2003-12/msg00000.html, http://marc.info/?l=bugtraq&m=107152093419276&w=2, http://mail.nl.linux.org/xchat-announce/2003-12/msg00000.html
CWE: CWE-476
CVE-2003-0561
Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP banner, or long responses to the client commands (2) USER, (3) PASS, (4) ACCT, and possibly other commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: iglooftp_pro
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0010.html, http://marc.info/?l=bugtraq&m=105769805311484&w=2, http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0010.html
CVE-2003-0480
VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipulation."
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: workstation
References: http://marc.info/?l=bugtraq&m=105673688529147&w=2, http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=1019, http://marc.info/?l=bugtraq&m=105673688529147&w=2
CVE-2003-1280
Directory traversal vulnerability in cgihtml 1.69 allows remote attackers to overwrite and create arbitrary files via a .. (dot dot) in multipart/form-data uploads.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: cgihtml
References: http://www.iss.net/security_center/static/11022.php, http://www.securityfocus.com/archive/1/305469, http://www.securityfocus.com/bid/6550
CVE-2003-0616
Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: epolicy_orchestrator
References: http://www.atstake.com/research/advisories/2003/a073103-1.txt, http://www.nai.com/us/promos/mcafee/epo_vulnerabilities.asp, http://www.atstake.com/research/advisories/2003/a073103-1.txt
CVE-2003-1215
SQL injection vulnerability in groupcp.php for phpBB 2.0.6 and earlier allows group moderators to perform unauthorized activities via the sql_in parameter.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=107273069130885&w=2, http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943, http://www.securityfocus.com/bid/9314
CVE-2003-1111
The Session Initiation Protocol (SIP) implementation in multiple dynamicsoft products including y and certain demo products for AppEngine allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: appengine
References: http://www.cert.org/advisories/CA-2003-06.html, http://www.dynamicsoft.com/support/advisory/ca-2003-06.php, http://www.ee.oulu.fi/research/ouspg/protos/testing/c07/sip/
CVE-2003-0024
The menuBar feature in aterm 0.42 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequence that inserts the commands into the menu.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aterm
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html, http://marc.info/?l=bugtraq&m=104612710031920&w=2, http://www.iss.net/security_center/static/11416.php