Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-0153 State: PUBLISHED Published: 2003-03-26T05:00:00 Last Updated: 2024-08-08T01:43:35.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102980129101054&w=2 - http://bugzilla.mozilla.org/show_bug.cgi?id=187230 - http://www.debian.org/security/2003/dsa-265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9921 - http://www.securityfocus.com/bid/5517
CVE ID: CVE-2003-0154 State: PUBLISHED Published: 2003-03-26T05:00:00 Last Updated: 2024-08-08T01:43:35.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.mozill
entified by Mozilla bug #146244. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.mozilla.org/attachment.cgi?id=95985&action=view - http://bugzilla.mozilla.org/attachment.cgi?id=95950&action=view - http://www.securityfocus.com/bid/5516 - http://www.iss.net/security_center/static/9920.php - http://marc.info/?l=bugtraq&m=102980129101054&w=2 - http://bugzilla.mozilla.org/show_bug.cgi?id=163573 - http://www.debian.org/security/2003/dsa-265 - http://bugzilla.mozilla.org/show_bug.cgi?id=146244
CVE ID: CVE-2003-0155 State: PUBLISHED Published: 2003-03-26T05:00:00 Last Updated: 2024-08-08T01:43:35.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7163 - http://www.debian.org/security/2003/dsa-265
CVE ID: CVE-2003-0156 State: PUBLISHED Published: 2003-03-21T05:00:00 Last Updated: 2024-08-08T01:43:35.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Cross-Referencing Linux (LXR) allows remote attackers to read arbitrary files via .. (dot dot) sequences in the v parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-264 - http://www.securityfocus.com/bid/7062 - http://marc.info/?l=bugtraq&m=104739747222492&w=2
CVE ID: CVE-2003-0157 State: REJECTED Published: 2003-03-21T05:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2003-0158 State: REJECTED Published: 2003-03-21T05:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2003-0159 State: PUBLISHED Published: 2003-03-26T05:00:00 Last Updated: 2024-08-08T01:43:36.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A55 - http://www.redhat.com/support/errata/RHSA-2003-077.html - http://www.novell.com/linux/security/advisories/2003_019_ethereal.html - http://marc.info/?l=bugtraq&m=104741
077.html - http://www.novell.com/linux/security/advisories/2003_019_ethereal.html - http://marc.info/?l=bugtraq&m=104741640924709&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:051 - http://www.ethereal.com/appnotes/enpa-sa-00008.html
CVE ID: CVE-2003-0160 State: PUBLISHED Published: 2003-03-26T05:00:00 Last Updated: 2024-08-08T01:43:35.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.2.11 allow remote attackers to inject arbitrary HTML code and steal information from a client's web browser. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/mailarchive/forum.php?thread_id=1641953&forum_id=1988 - http://www.redhat.com/support/errata/RHSA-2003-112.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A614
CVE ID: CVE-2003-0161 State: PUBLISHED Published: 2003-04-01T05:00:00 Last Updated: 2024-08-08T01:43:36.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337. Additional Analyst Notes: - CVE Program Container: References: - http://suns
different vulnerability than CVE-2002-1337. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001088.1-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-52620-1 - ftp://patches.sgi.com/support/free/security/advisories/20030401-01-P - http://www.securityfocus.com/bid/7230 - http://marc.info/?l=bugtraq&m=104914999806315&w=2 - http://www.redhat.com/support/errata/RHSA-2003-120.html - http://www.securityfocus.com/archive/1/317135/30/25220/threaded - http://www.debian.org/security/2003/dsa-278 - http://www.debian.org/security/2003/dsa-290 - http://www.securityfocus.com/archive/1/317135/30/25220/threaded - http://l
http://www.debian.org/security/2003/dsa-290 - http://www.securityfocus.com/archive/1/317135/30/25220/threaded - http://lists.apple.com/mhonarc/security-announce/msg00028.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-52700-1 - http://www.cert.org/advisories/CA-2003-12.html - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-016.0.txt - http://www.securityfocus.com/archive/1/316961/30/25250/threaded - http://www.redhat.com/support/errata/RHSA-2003-121.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000614 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.11/SCOSA-2004.11.txt - http://www.gentoo.org/security/en/glsa/glsa-200303-27.xml - http://lists.g
/OpenServer/SCOSA-2004.11/SCOSA-2004.11.txt - http://www.gentoo.org/security/en/glsa/glsa-200303-27.xml - http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004295.html - http://marc.info/?l=bugtraq&m=104897487512238&w=2 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:07.sendmail.asc - http://www.securityfocus.com/archive/1/321997 - http://marc.info/?l=bugtraq&m=104896621106790&w=2 - http://www.kb.cert.org/vuls/id/897604
CVE ID: CVE-2003-0162 State: PUBLISHED Published: 2003-03-26T05:00:00 Last Updated: 2024-08-08T01:43:35.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-271 - http://marc.info/?l=bugtraq&m=104636153214262&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11431 - http://marc.info/?l=bugtraq&m=104673407728323&w=2 - http://www.securityfocus.com/bid/6971
CVE ID: CVE-2003-0163 State: PUBLISHED Published: 2003-04-15T04:00:00 Last Updated: 2024-08-08T01:43:36.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service (crash) via a negative length, which overwrites arbitrary heap memory with a zero byte. Additional Analyst Notes: - CVE Program Container: References: - http://www.rapid7.com/advisories/R7-0013.html - http://marc.info/?l=bugtraq&m=105013281120352&w=2 - http://www.securityfocus.com/bid/7182
CVE ID: CVE-2003-0165 State: PUBLISHED Published: 2003-03-29T05:00:00 Last Updated: 2024-08-08T01:43:36.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A52 - http://www.securityfocus.com/bid/7121 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:048 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0157.html - http://www.kb.cert.org/vul
es?name=MDKSA-2003:048 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0157.html - http://www.kb.cert.org/vuls/id/363001 - http://www.redhat.com/support/errata/RHSA-2003-128.html - http://marc.info/?l=bugtraq&m=104887189724146&w=2 - http://www.coresecurity.com/common/showdoc.php?idx=312&idxseccion=10
CVE ID: CVE-2003-0166 State: PUBLISHED Published: 2003-03-27T05:00:00 Last Updated: 2024-08-08T01:43:36.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104931415307111&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000691 - http://marc.info/?l=bugtraq&m=104878100719467&w=2 - http://
/distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000691 - http://marc.info/?l=bugtraq&m=104878100719467&w=2 - http://www.securityfocus.com/bid/7198 - http://marc.info/?l=bugtraq&m=104869828526885&w=2 - http://www.securityfocus.com/bid/7197
CVE ID: CVE-2003-0167 State: PUBLISHED Published: 2003-03-29T05:00:00 Last Updated: 2024-08-08T01:43:36.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a specially crafted mail folder, a different vulnerability than CVE-2003-0140. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7229 - http://www.debian.org/security/2003/dsa-274 - http://www.debian.org/security/2003/dsa-300
CVE ID: CVE-2003-0168 State: PUBLISHED Published: 2003-04-01T05:00:00 Last Updated: 2024-08-08T01:43:36.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime Player 5.x and 6.0 for Windows allows remote attackers to execute arbitrary code via a long QuickTime URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/10561 - http://www.idefense.com/advisory/03.31.03.txt - http://www.securityfocus.com/archive/1/317141/30/25220/threaded - http://lists.apple.com/mhonarc/security-announce/msg00027.html - http://www.securityfocus.com/archive/1/317148/30/25220/threaded - http://www.kb.cert.org/vuls/id/112553 - http://www.
- http://www.securityfocus.com/archive/1/317148/30/25220/threaded - http://www.kb.cert.org/vuls/id/112553 - http://www.securityfocus.com/bid/7247 - http://www.securityfocus.com/archive/1/317141/30/25220/threaded - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0166.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11671
CVE ID: CVE-2003-0169 State: PUBLISHED Published: 2003-04-01T05:00:00 Last Updated: 2024-08-08T01:43:36.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of service (CPU consumption) via a request to hpnst.exe that calls itself, which causes an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0164.html - http://marc.info/?l=bugtraq&m=104914959705949&w=2 - http://www.securityfocus.com/bid/7246
CVE ID: CVE-2003-0170 State: PUBLISHED Published: 2004-03-10T05:00:00 Last Updated: 2024-08-08T01:43:35.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in ftpd in IBM AIX 5.2, when configured to use Kerberos 5 for authentication, allows remote attackers to gain privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7346 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11823 - http://www.osvdb.org/4878 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY42424 - http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2003.0469.1
CVE ID: CVE-2003-0171 State: PUBLISHED Published: 2003-04-15T04:00:00 Last Updated: 2024-08-08T01:43:36.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a041003-1.txt - http://lists.apple.com/mhonarc/security-announce/msg00028.html
CVE ID: CVE-2003-0172 State: PUBLISHED Published: 2003-03-29T05:00:00 Last Updated: 2024-08-08T01:43:36.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104931415307111&w=2 - http://www.securityfocus.com/archive/1/316583 - http://www.osvdb.org/2113 - http://marc.info/?l=bugtraq&m=104878149020152&w=2 - http://www.securityfocus.com/bid/7210 - http://www.securityfocus.com/archive
arc.info/?l=bugtraq&m=104878149020152&w=2 - http://www.securityfocus.com/bid/7210 - http://www.securityfocus.com/archive/1/385238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11637
CVE ID: CVE-2003-0173 State: PUBLISHED Published: 2003-04-15T04:00:00 Last Updated: 2024-08-08T01:43:36.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/111673 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:047 - ftp://patches.sgi.com/support/free/security/advisories/20030404-01-P - http://www.debian.org/security/2003/dsa-283
CVE ID: CVE-2003-0174 State: PUBLISHED Published: 2003-04-29T04:00:00 Last Updated: 2024-08-08T01:43:36.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7442 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11860 - ftp://patches.sgi.com/support/free/security/advisories/20030407-01-P - http://www.ciac.org/ciac/bulletins/n-084.shtml
CVE ID: CVE-2003-0175 State: PUBLISHED Published: 2004-01-14T05:00:00 Last Updated: 2024-08-08T01:43:36.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWATCH ioctl. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/12241 - http://www.securityfocus.com/bid/7868 - http://www.securitytracker.com/id?1008770 - http://www.kb.cert.org/vuls/id/142228 - ftp://patches.sgi.com/support/free/security/advisories/20030603-01-P
CVE ID: CVE-2003-0176 State: PUBLISHED Published: 2003-08-18T04:00:00Z Last Updated: 2024-09-17T02:07:15.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Name Service Daemon (nsd), when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via a UDP port scan. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20030701-01-P
CVE ID: CVE-2003-0177 State: PUBLISHED Published: 2003-08-18T04:00:00Z Last Updated: 2024-09-16T18:29:45.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause subsequent group membership entries to be processed inadvertently. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20030701-01-P
CVE ID: CVE-2003-0178 State: PUBLISHED Published: 2003-03-29T05:00:00 Last Updated: 2024-08-08T01:43:36.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parameter for iNotes, (2) the Foldername option in the PresetFields parameter for iNotes, or (3) a long Host header, which is inserted into a long Location header and used during a redirect operation. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104550063431463&w=2 - http://www.kb.cert.o
t Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104550063431463&w=2 - http://www.kb.cert.org/vuls/id/772817 - http://marc.info/?l=bugtraq&m=104550335103136&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0080.html - http://marc.info/?l=bugtraq&m=104550063431461&w=2 - http://www.kb.cert.org/vuls/id/542873 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0081.html - http://www.cert.org/advisories/CA-2003-11.html - http://marc.info/?l=ntbugtraq&m=104558777531350&w=2 - http://marc.info/?l=ntbugtraq&m=104558777331345&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11337 - http://www.kb.cert.org/vuls/id/206361 - https://exchange.xfo
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/11337 - http://www.kb.cert.org/vuls/id/206361 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11336 - http://marc.info/?l=ntbugtraq&m=104558778331387&w=2 - http://www.securityfocus.com/bid/6870 - http://www.ciac.org/ciac/bulletins/n-065.shtml - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0082.html - http://www.nextgenss.com/advisories/lotus-hostlocbo.txt - http://www.nextgenss.com/advisories/lotus-inotesoflow.txt - http://www.securityfocus.com/bid/6871
CVE ID: CVE-2003-0179 State: PUBLISHED Published: 2003-03-29T05:00:00 Last Updated: 2024-08-08T01:43:36.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104550335103136&w=2 - http://www-1.ibm.com/support/docview.wss?uid=swg21104543 - http://www.cert.org/advisories/CA-2003-11.html - http://marc.info/?l=ntbugtraq&m=104558778131373&w=
ss?uid=swg21104543 - http://www.cert.org/advisories/CA-2003-11.html - http://marc.info/?l=ntbugtraq&m=104558778131373&w=2 - http://www.securityfocus.com/bid/6872 - http://www.kb.cert.org/vuls/id/571297 - http://marc.info/?l=ntbugtraq&m=104558778331387&w=2 - http://www.ciac.org/ciac/bulletins/n-065.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/11339 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0082.html - http://www.nextgenss.com/advisories/lotus-inotesclientaxbo.txt - http://marc.info/?l=bugtraq&m=104550124032513&w=2
CVE ID: CVE-2003-0180 State: PUBLISHED Published: 2003-03-29T05:00:00 Last Updated: 2024-08-08T01:43:36.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the h_PageUI form. Additional Analyst Notes: - CVE Program Container: References: - http://www.nextgenss.com/advisories/lotus-60dos.txt - http://www.cert.org/advisories/CA-2003-11.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11360 - http://www.securityfocus.com/bid/6951 - http://www-1.ibm.com/support/docview.wss?uid=swg21104528 - http://archives.neohapsis.com
ww.securityfocus.com/bid/6951 - http://www-1.ibm.com/support/docview.wss?uid=swg21104528 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0086.html - http://www.ciac.org/ciac/bulletins/n-065.shtml - http://www.kb.cert.org/vuls/id/355169
CVE ID: CVE-2003-0181 State: PUBLISHED Published: 2003-03-29T05:00:00 Last Updated: 2024-08-08T01:43:36.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the s_Validation form with a long, unknown parameter name. Additional Analyst Notes: - CVE Program Container: References: - http://www.nextgenss.com/advisories/lotus-60dos.txt - http://www.cert.org/advisories/CA-2003-11.html - http://www.securityfocus.com/bid/6951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11361 - http://www-1.ibm.com/support/docview
tyfocus.com/bid/6951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11361 - http://www-1.ibm.com/support/docview.wss?uid=swg21104528 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0086.html
CVE ID: CVE-2003-0187 State: PUBLISHED Published: 2003-08-05T04:00:00 Last Updated: 2024-08-08T01:43:36.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows remote attackers to cause a denial of service (resource consumption) due to an inconsistency with Linux 2.4.20's support of linked lists, which causes Netfilter to fail to identify connections with an UNCONFIRMED status and use large timeouts. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
E Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A260 - http://marc.info/?l=bugtraq&m=105986028426824&w=2