Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-1568 State: PUBLISHED Published: 2009-02-06T19:00:00Z Last Updated: 2024-09-16T19:56:50.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an invalid URL, related to the websSafeUrl function. Additional Analyst Notes: - CVE Program Container: References: - http://data.goahead.com/Software/Webserver/2.1.8/release.htm#null-pointer-crash-in-webssafeurl
CVE ID: CVE-2003-1569 State: PUBLISHED Published: 2009-02-06T19:00:00Z Last Updated: 2024-09-16T17:14:44.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP request with a (1) con, (2) nul, (3) clock$, or (4) config$ device name in a path component, different vectors than CVE-2001-0385. Additional Analyst Notes: - CVE Program Container: References: - http://data.goahead.com/Software/Webserver/2.1.8/release.htm#windows-95-98-me-aux-denial-of-service
CVE ID: CVE-2003-1570 State: PUBLISHED Published: 2009-03-31T18:00:00 Last Updated: 2024-08-08T02:35:17.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the server console in some circumstances, which allows remote authenticated administrators to monitor server operations by establishing a console mode session, related to "session exposure." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49536 - http://www.vupen.com/english/advisories/2009/0881 - http://www-01.ibm.com/suppor
ce.ibmcloud.com/vulnerabilities/49536 - http://www.vupen.com/english/advisories/2009/0881 - http://www-01.ibm.com/support/docview.wss?uid=swg21375360 - http://www.securityfocus.com/bid/34285 - http://securitytracker.com/id?1021947 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC37554 - http://secunia.com/advisories/34498
CVE ID: CVE-2003-1571 State: PUBLISHED Published: 2009-04-02T15:00:00 Last Updated: 2024-08-08T02:35:17.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request for database/WWGguestbook.mdb. NOTE: it was later reported that 8.21 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=25863 - http://www.osvdb.org/2492 - https://www.exploit-db.com/exploits/7488 - http://secunia.com/advisories
uln.aspx?id=25863 - http://www.osvdb.org/2492 - https://www.exploit-db.com/exploits/7488 - http://secunia.com/advisories/9639
CVE ID: CVE-2003-1572 State: PUBLISHED Published: 2009-06-01T22:00:00Z Last Updated: 2024-09-16T23:46:17.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstrated by reading environment variables using modified .data and .size fields. Additional Analyst Notes: - CVE Program Container: References: - http://archive.cert.uni-stuttgart.de/bugtraq/2003/06/msg00219.html - http://www.illegalaccess.org/java/jmf.php - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F54760 - http://secu
ttp://www.illegalaccess.org/java/jmf.php - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F54760 - http://securitytracker.com/id?1006777
CVE ID: CVE-2003-1573 State: PUBLISHED Published: 2009-06-01T22:00:00 Last Updated: 2024-08-08T02:35:16.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary programs, conduct a denial of service, and obtain sensitive information via a crafted SQL statement, related to "inadequate security settings and library bugs in sun.* and org.apache.* packages." Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-01/0148.html - http://secunia.com/advisories/10460 - http://archives.neohapsis.com/arc
ohapsis.com/archives/bugtraq/2004-01/0148.html - http://secunia.com/advisories/10460 - http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0675.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/14008 - http://securitytracker.com/id?1008491 - http://www.securityfocus.com/bid/9230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14882 - http://seclists.org/bugtraq/2003/Dec/0249.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/14881
CVE ID: CVE-2003-1574 State: PUBLISHED Published: 2009-08-24T10:00:00 Last Updated: 2024-08-08T02:35:16.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: TikiWiki 1.6.1 allows remote attackers to bypass authentication by entering a valid username with an arbitrary password, possibly related to the Internet Explorer "Remember Me" feature. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40347 - http://sourceforge.net/tracker/index.php?func=detail&aid=748739&group_id=64258&atid=506846
CVE ID: CVE-2003-1575 State: PUBLISHED Published: 2010-01-28T20:00:00Z Last Updated: 2024-09-17T04:25:22.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inheritance of default ACLs in certain circumstances related to the characteristics of a directory inode, which allows local users to bypass intended file permissions by accessing a file on a VxFS filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200161-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-
tp://sunsolve.sun.com/search/document.do?assetkey=1-66-200161-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-113207-05-1
CVE ID: CVE-2003-1576 State: PUBLISHED Published: 2010-01-28T20:00:00Z Last Updated: 2024-09-17T04:19:40.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in pamverifier in Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8 and 9 on the sparc platform allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201231-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-113105-01-1
CVE ID: CVE-2003-1577 State: PUBLISHED Published: 2010-02-05T22:13:00 Last Updated: 2024-08-08T02:35:16.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files, and conduct cross-site scripting (XSS) attacks involving the iPlanet Log Analyzer, via an HTTP request in conjunction with a crafted DNS response, related to an "Inverse Lookup Log Corruption (ILLC)" issue, a different vulnerability than CVE-2002-1315 and CVE-2002-1316. Additional Analyst Notes: - CVE Program Container: References: - http
ulnerability than CVE-2002-1315 and CVE-2002-1316. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56632 - http://www.securityfocus.com/archive/1/313867
CVE ID: CVE-2003-1578 State: PUBLISHED Published: 2010-02-05T22:13:00 Last Updated: 2024-08-08T02:35:17.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning with a "format=" substring, related to an "Inverse Lookup Log Corruption (ILLC)" issue. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1 - http://www.s
- CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1 - http://www.securityfocus.com/bid/7012 - http://www.securityfocus.com/archive/1/313867 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56633
CVE ID: CVE-2003-1579 State: PUBLISHED Published: 2010-02-05T22:13:00Z Last Updated: 2024-09-16T19:19:32.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun ONE (aka iPlanet) Web Server 6 on Windows, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad represents an unresolved IP address, which allows remote attackers to spoof IP addresses via crafted DNS responses containing numerical top-level domains, as demonstrated by a forged 123.123.123.123 domain name, related to an "Inverse Lookup Log Corruption (ILLC)" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus
Log Corruption (ILLC)" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/313867
CVE ID: CVE-2003-1580 State: PUBLISHED Published: 2010-02-05T22:13:00Z Last Updated: 2024-09-17T00:15:26.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad represents an unresolved IP address, which allows remote attackers to spoof IP addresses via crafted DNS responses containing numerical top-level domains, as demonstrated by a forged 123.123.123.123 domain name, related to an "Inverse Lookup Log Corruption (ILLC)" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/3
(ILLC)" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/313867
CVE ID: CVE-2003-1581 State: PUBLISHED Published: 2010-02-05T22:13:00Z Last Updated: 2024-09-16T17:19:15.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response, as demonstrated by injecting XSS sequences, related to an "Inverse Lookup Log Corruption (ILLC)" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/313867
CVE ID: CVE-2003-1582 State: PUBLISHED Published: 2010-02-05T22:13:00Z Last Updated: 2024-09-16T22:15:48.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Information Services (IIS) 6.0, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response, as demonstrated by injecting XSS sequences, related to an "Inverse Lookup Log Corruption (ILLC)" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/313867
CVE ID: CVE-2003-1583 State: PUBLISHED Published: 2010-02-05T22:13:00 Last Updated: 2024-08-08T02:35:16.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebTrends allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an "Inverse Lookup Log Corruption (ILLC)" issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56650 - http://www.securityfocus.com/archive/1/313867
CVE ID: CVE-2003-1584 State: PUBLISHED Published: 2010-02-05T22:13:00 Last Updated: 2024-08-08T02:35:17.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SurfStats allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an "Inverse Lookup Log Corruption (ILLC)" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/313867 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56649
CVE ID: CVE-2003-1585 State: PUBLISHED Published: 2010-02-05T22:13:00 Last Updated: 2024-08-08T02:35:17.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebLogExpert allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an "Inverse Lookup Log Corruption (ILLC)" issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56647 - http://www.securityfocus.com/archive/1/313867
CVE ID: CVE-2003-1586 State: PUBLISHED Published: 2010-02-05T22:13:00 Last Updated: 2024-08-08T02:35:17.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebExpert allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56646 - http://www.securityfocus.com/archive/1/313867
CVE ID: CVE-2003-1587 State: PUBLISHED Published: 2010-02-05T22:13:00 Last Updated: 2024-08-08T02:35:17.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in LoganPro allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56645 - http://www.securityfocus.com/archive/1/313867
CVE ID: CVE-2003-1588 State: PUBLISHED Published: 2010-02-08T20:00:00 Last Updated: 2024-08-08T02:35:17.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Cluster 2.2, when HA-Oracle or HA-Sybase DBMS services are used, stores database credentials in cleartext in a cluster configuration file, which allows local users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201460-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56617
CVE ID: CVE-2003-1589 State: PUBLISHED Published: 2010-02-25T19:00:00 Last Updated: 2024-08-08T02:35:17.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 4.1 before SP13 and 6.0 before SP6 on Windows allows attackers to cause a denial of service (daemon crash) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56616 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201454-1
CVE ID: CVE-2003-1590 State: PUBLISHED Published: 2010-02-25T19:00:00 Last Updated: 2024-08-08T02:35:17.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 6.0 SP3 through SP5 on Windows allows remote attackers to cause a denial of service (daemon crash) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56615 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201451-1
CVE ID: CVE-2003-1591 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-17T00:22:07.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allows user-assisted remote attackers to cause a denial of service (console hang) via a large number of FTP sessions, which are not properly handled during an NLM unload. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE ID: CVE-2003-1592 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-16T20:26:30.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allow remote attackers to cause a denial of service (abend) via a long (1) username or (2) password. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE ID: CVE-2003-1593 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-16T20:36:53.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 does not enforce domain-name login restrictions, which allows remote attackers to bypass intended access control via an FTP connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE ID: CVE-2003-1594 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-16T23:06:31.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly enforce FTPREST.TXT settings, which allows remote attackers to bypass intended access restrictions via an FTP session. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE ID: CVE-2003-1595 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-16T23:11:32.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE ID: CVE-2003-1596 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-16T19:51:36.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass intended access restrictions via an FTP session. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE ID: CVE-2003-1598 State: PUBLISHED Published: 2014-10-01T14:00:00 Last Updated: 2024-08-08T02:35:16.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in log.header.php in WordPress 0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the posts variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernelpanik.org/docs/kernelpanik/wordpressadv.txt - http://seclists.org/oss-sec/2012/q1/77 - http://secunia.com/advisories/8954/ - http://osvdb.org/show/osvdb/4610 - http://www.securityfocus.com/bid/7784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12204
CVE ID: CVE-2003-1599 State: PUBLISHED Published: 2014-10-27T20:00:00 Last Updated: 2024-08-08T02:35:17.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in wp-links/links.all.php in WordPress 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the $abspath variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/12205 - http://www.kernelpanik.org/docs/kernelpanik/wordpressadv.txt - http://www.openwall.com/lists/oss-security/2012/01/06/3 - http://www.securityfocus.com/bid/7785 - http://www.osvdb.org/4611
CVE ID: CVE-2003-1600 State: REJECTED Published: 2020-11-05T19:50:40 Last Updated: 2020-11-05T19:50:40 Description: No description available.
CVE ID: CVE-2003-1601 State: REJECTED Published: 2020-11-05T19:51:59 Last Updated: 2020-11-05T19:51:59 Description: No description available.
CVE ID: CVE-2003-1602 State: REJECTED Published: 2020-11-05T19:52:26 Last Updated: 2020-11-05T19:52:26 Description: No description available.
CVE ID: CVE-2003-1603 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-08T02:35:16.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Healthcare Discovery VH has a default password of (1) interfile for the ftpclient user of the Interfile server or (2) "2" for the LOCAL user of the FTP server for the Codonics printer, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/2337093-100.pdf?REQ=RAA&DIRECTION=2337093-100&FILENAME=2337093-100.pdf&FILEREV=1&DOCREV_ORG=1 - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https:/
093-100.pdf&FILEREV=1&DOCREV_ORG=1 - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CVE ID: CVE-2003-1604 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-08T02:35:17.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: The redirect_target function in net/ipv4/netfilter/ipt_REDIRECT.c in the Linux kernel before 2.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending packets to an interface that has a 0.0.0.0 IP address, a related issue to CVE-2015-8787. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1303072 - http://marc.info/?l=netfilter-devel&m=106668497403047&w=2 - http://www.openwall.com/lists/oss-security/2016/01/27/9 - http://
//marc.info/?l=netfilter-devel&m=106668497403047&w=2 - http://www.openwall.com/lists/oss-security/2016/01/27/9 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html
CVE ID: CVE-2003-1605 State: PUBLISHED Published: 2018-08-23T19:00:00 Last Updated: 2024-08-08T02:35:17.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://curl.haxx.se/docs/CVE-2003-1605.html - http://www.securityfocus.com/bid/8432
CVE ID: CVE-2003-20001 State: PUBLISHED Published: 2025-04-01T00:00:00.000Z Last Updated: 2025-04-04T20:22:13.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Mitel ICP VoIP 3100 devices. When a remote user attempts to log in via TELNET during the login wait time and an external call comes in, the system incorrectly divulges information about the call and any SMDR records generated by the system. The information provided includes the service type, extension number and other parameters, related to the call activity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://packetstorm.news/files/id/31445 - http://olografix.org/acme/mite
t Notes: - CISA ADP Vulnrichment: References: - https://packetstorm.news/files/id/31445 - http://olografix.org/acme/mitel.txt - https://rb.gy/1smt22 - https://www.exploit-db.com/exploits/49176