Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-0737 State: PUBLISHED Published: 2003-09-04T04:00:00 Last Updated: 2024-08-08T02:05:12.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to obtain the full pathname of phpWebSite via an invalid year, which generates an error from localtime() in TimeZone.php of the Pear library. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106252188522715&w=2 - http://marc.info/?l=bugtraq&m=106062021711496&w=2
CVE ID: CVE-2003-0738 State: PUBLISHED Published: 2003-09-04T04:00:00 Last Updated: 2024-08-08T02:05:12.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to cause a denial of service (crash) via a long year parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106252188522715&w=2 - http://marc.info/?l=bugtraq&m=106062021711496&w=2
CVE ID: CVE-2003-0739 State: PUBLISHED Published: 2003-09-04T04:00:00 Last Updated: 2024-08-08T02:05:12.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Workstation 4.0.1 for Linux, build 5289 and earlier, allows local users to delete arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=1106 - http://marc.info/?l=bugtraq&m=106029217115023&w=2
CVE ID: CVE-2003-0740 State: PUBLISHED Published: 2003-09-04T04:00:00 Last Updated: 2024-08-08T02:05:12.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users to hijack the Stunnel server. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106260760211958&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000736 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:108 - http://www.redhat.com/support/errata/RHSA-2003-297.html
CVE ID: CVE-2003-0741 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0742 State: PUBLISHED Published: 2003-09-19T04:00:00 Last Updated: 2024-08-08T02:05:12.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to run as if it were called from ncsa_httpd, then modifying the PATH environment variable to point to a malicious "hostname" program. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2003-0742
CVE ID: CVE-2003-0743 State: PUBLISHED Published: 2003-09-06T04:00:00 Last Updated: 2024-08-08T02:05:12.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed before the "(no argument given)" string is appended to the buffer. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-376 - http://distro.conectiva.com.br/atualizacoes/?id=a&
ontainer: References: - http://www.debian.org/security/2003/dsa-376 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000735 - http://www.exim.org/pipermail/exim-users/Week-of-Mon-20030811/057720.html - http://www.exim.org/pipermail/exim-announce/2003q3/000094.html - http://marc.info/?l=bugtraq&m=106252015820395&w=2 - http://marc.info/?l=vuln-dev&m=106264740820334&w=2 - http://www.exim.org/pipermail/exim-users/Week-of-Mon-20030811/057809.html - http://packages.debian.org/changelogs/pool/main/e/exim/exim_3.36-13/changelog - http://packages.debian.org/changelogs/pool/main/e/exim4/exim4_4.34-10/changelog
CVE ID: CVE-2003-0744 State: PUBLISHED Published: 2003-09-06T04:00:00 Last Updated: 2024-08-08T02:05:12.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service (process hang and termination) via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/ - http://www.securityfocus.com/bid/8541 - http://secunia.com/advisories/9678 - http://marc.info/?l=bugtraq&m=106270038210736&w=2 - http://leafnode.sourceforge.net/leafnode-SA
ia.com/advisories/9678 - http://marc.info/?l=bugtraq&m=106270038210736&w=2 - http://leafnode.sourceforge.net/leafnode-SA-2003-01.txt - http://www.osvdb.org/6452
CVE ID: CVE-2003-0745 State: PUBLISHED Published: 2003-09-06T04:00:00Z Last Updated: 2024-09-16T16:28:55.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: SNMPc 6.0.8 and earlier performs authentication to the server on the client side, which allows remote attackers to gain privileges by decrypting the password that is returned by the server. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-08/0340.html
CVE ID: CVE-2003-0746 State: PUBLISHED Published: 2003-09-06T04:00:00 Last Updated: 2024-08-08T02:05:12.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various Distributed Computing Environment (DCE) implementations, including HP OpenView, allow remote attackers to cause a denial of service (process hang or termination) via certain malformed inputs, as triggered by attempted exploits against the vulnerabilities CVE-2003-0352 or CVE-2003-0605, such as the Blaster/MSblast/LovSAN worm. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/hp/2003-q3/0042.html - http://www.kb.cert.org/vuls/id/377804 - ftp://patches.sgi.com/support
ives.neohapsis.com/archives/hp/2003-q3/0042.html - http://www.kb.cert.org/vuls/id/377804 - ftp://patches.sgi.com/support/free/security/advisories/20030902-01-P - http://www.secunia.com/advisories/9482
CVE ID: CVE-2003-0747 State: PUBLISHED Published: 2003-09-06T04:00:00 Last Updated: 2024-08-08T02:05:12.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters (1) ~service, (2) ~templatelanguage, (3) ~language, (4) ~theme, or (5) ~template, which leaks the information in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.html - http://www.securityfocus.com/bid/8515 - https://e
: - http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.html - http://www.securityfocus.com/bid/8515 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13063
CVE ID: CVE-2003-0748 State: PUBLISHED Published: 2003-09-06T04:00:00 Last Updated: 2024-08-08T02:05:12.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the ~theme parameter and a ~template parameter with a filename followed by space characters, which can prevent SAP from effectively adding a .html extension to the filename. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.html - http://www.securityfocus.com/bid
ainer: References: - http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.html - http://www.securityfocus.com/bid/8516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13066
CVE ID: CVE-2003-0749 State: PUBLISHED Published: 2003-09-06T04:00:00 Last Updated: 2024-08-08T02:05:12.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal cookies via the ~service parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.html - http://www.securityfocus.com/bid/8517
CVE ID: CVE-2003-0750 State: PUBLISHED Published: 2003-09-06T04:00:00Z Last Updated: 2024-09-17T04:25:25.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: secure.php in PY-Membres 4.2 and earlier allows remote attackers to bypass authentication by setting the adminpy parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0089.html
CVE ID: CVE-2003-0751 State: PUBLISHED Published: 2003-09-06T04:00:00Z Last Updated: 2024-09-16T22:41:22.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pass_done.php for PY-Membres 4.2 and earlier allows remote attackers to execute arbitrary SQL queries via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0089.html
CVE ID: CVE-2003-0752 State: PUBLISHED Published: 2003-09-06T04:00:00Z Last Updated: 2024-09-17T03:47:36.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in global.php3 of AttilaPHP 3.0, and possibly earlier versions, allows remote attackers to bypass authentication via a modified cook_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0090.html
CVE ID: CVE-2003-0753 State: PUBLISHED Published: 2003-09-06T04:00:00Z Last Updated: 2024-09-16T19:00:33.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphp_config[LangFile] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-08/0345.html
CVE ID: CVE-2003-0754 State: PUBLISHED Published: 2003-09-06T04:00:00Z Last Updated: 2024-09-16T17:23:11.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is used for authentication. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-08/0345.html
CVE ID: CVE-2003-0755 State: PUBLISHED Published: 2003-09-06T04:00:00Z Last Updated: 2024-09-17T02:31:24.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in sys_cmd.c for gtkftpd 1.0.4 and earlier allows remote attackers to execute arbitrary code by creating long directory names and listing them with a LIST command. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vuln-dev/2003-q3/0101.html
CVE ID: CVE-2003-0756 State: PUBLISHED Published: 2003-09-06T04:00:00Z Last Updated: 2024-09-16T19:41:59.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in sitebuilder.cgi in SiteBuilder 1.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the selectedpage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-09/0011.html
CVE ID: CVE-2003-0757 State: PUBLISHED Published: 2003-09-06T04:00:00Z Last Updated: 2024-09-16T19:36:35.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemote requests to TCP ports 256 or 264, which leaks the IP addresses in a reply packet. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-09/0018.html
CVE ID: CVE-2003-0758 State: PUBLISHED Published: 2003-09-19T04:00:00 Last Updated: 2024-08-08T02:05:12.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users to gain root privileges via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/n-154.shtml - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0114.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/13218 - http://www.securityfocus.com/bid/8552 - http://marc.info/?l=bugtraq&m=106389919618721&w=2 - http://www.coresecurity.com/common/showd
ecurityfocus.com/bid/8552 - http://marc.info/?l=bugtraq&m=106389919618721&w=2 - http://www.coresecurity.com/common/showdoc.php?idx=366&idxseccion=10
CVE ID: CVE-2003-0759 State: PUBLISHED Published: 2003-09-19T04:00:00 Last Updated: 2024-08-08T02:05:11.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privileges via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8553 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aixv7/FP10a_U495172/FixpakReadme.txt - http://www-3.ibm.com/cgi-bin/db2www/data/db2/udb/winos2unix/support/aparlib.d2w/display_apar_details?aparno=IY47653 - http://www.ciac.org/ciac/bulletins/n-154.shtml - h
/winos2unix/support/aparlib.d2w/display_apar_details?aparno=IY47653 - http://www.ciac.org/ciac/bulletins/n-154.shtml - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0114.html - http://marc.info/?l=bugtraq&m=106389919618721&w=2 - http://www.coresecurity.com/common/showdoc.php?idx=366&idxseccion=10
CVE ID: CVE-2003-0760 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blubster 2.5 allows remote attackers to cause a denial of service (crash) via a flood of connections to UDP port 701. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/windowsntfocus/5RP0N15AUC.html - http://www.securityfocus.com/bid/8482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13012
CVE ID: CVE-2003-0761 State: PUBLISHED Published: 2003-09-12T04:00:00Z Last Updated: 2024-09-17T03:23:08.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP) protocol implementation for Asterisk releases before August 15, 2003, allows remote attackers to execute arbitrary code via certain (1) MESSAGE or (2) INFO requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a090403-1.txt
CVE ID: CVE-2003-0762 State: PUBLISHED Published: 2003-09-12T04:00:00Z Last Updated: 2024-09-16T21:57:13.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in (1) foxweb.dll and (2) foxweb.exe of Foxweb 2.5 allows remote attackers to execute arbitrary code via a long URL (PATH_INFO value). Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0096.html
CVE ID: CVE-2003-0763 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Escapade Scripting Engine (ESP) allows remote attackers to inject arbitrary script via the method parameter, as demonstrated using the PAGE parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106312344631197&w=2
CVE ID: CVE-2003-0764 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Escapade Scripting Engine (ESP) allows remote attackers to obtain sensitive path information via a malformed request, which leaks the information in an error message, as demonstrated using the PAGE parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106312344631197&w=2
CVE ID: CVE-2003-0765 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106305643432112&w=2
CVE ID: CVE-2003-0766 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious servers to execute arbitrary code via (1) a long FTP banner, (2) a long response to a USER command, or (3) a long response to a PASS command. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106305502230604&w=2
CVE ID: CVE-2003-0767 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and 0.27 and earlier for Linux and BSD, allows remote attackers to cause a denial of service and execute arbitrary code via a client request with a large length value. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106304902323758&w=2
CVE ID: CVE-2003-0768 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null character in the beginning of a tag name. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106304326916062&w=2
CVE ID: CVE-2003-0769 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attackers to insert arbitrary web script and HTML via the message field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2003-0769
CVE ID: CVE-2003-0770 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106381136115972&w=2 - http://www.securityfocus.com/archive/1/336598 - http://www.securityfocus.com/archive/1/317234
CVE ID: CVE-2003-0771 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106304236914921&w=2
CVE ID: CVE-2003-0772 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106288825902868&w=2 - http://www.securityfocus.com/bid/8542 - http://www.kb.cert.org/vuls/id/219140 - http://www.kb.cert.org/vuls/id/792284 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13119 - http://secunia.com/advisories/967
cert.org/vuls/id/792284 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13119 - http://secunia.com/advisories/9671
CVE ID: CVE-2003-0773 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-278.html - ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt - http://www.novell.com/linux/security/advisories/2003_046_sane.html - http://www.securityfocus.com/b
SSA-2004-005.0.txt - http://www.novell.com/linux/security/advisories/2003_046_sane.html - http://www.securityfocus.com/bid/8595 - http://www.redhat.com/support/errata/RHSA-2003-285.html - http://www.securityfocus.com/bid/8593 - http://www.debian.org/security/2003/dsa-379 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:099
CVE ID: CVE-2003-0774 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service (segmentation fault) when invalid memory is accessed. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-278.html - ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt - http://www.novell.com/linux/security/advisories/2003_046_sane.html - http://www.redhat.com/support/errata/RHSA-2003-285.ht
tp://www.novell.com/linux/security/advisories/2003_046_sane.html - http://www.redhat.com/support/errata/RHSA-2003-285.html - http://www.securityfocus.com/bid/8593 - http://www.debian.org/security/2003/dsa-379 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:099
CVE ID: CVE-2003-0775 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service (memory consumption or crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-278.html - ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt - http://www.novell.com/linux/security/advisories/2003_046_sane.html - http://www.s
/CSSA-2004-005.0/CSSA-2004-005.0.txt - http://www.novell.com/linux/security/advisories/2003_046_sane.html - http://www.securityfocus.com/bid/8600 - http://www.redhat.com/support/errata/RHSA-2003-285.html - http://www.securityfocus.com/bid/8593 - http://www.debian.org/security/2003/dsa-379 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:099