Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
efinition/oval%3Aorg.mitre.oval%3Adef%3A129 - http://www.redhat.com/support/errata/RHSA-2003-259.html - http://mail.gnome.org/archives/gnome-hackers/2003-August/msg00045.html
CVE ID: CVE-2003-0550 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:58:11.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to modify the bridge topology. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-238.html - http://www.debian.org/security/2004/dsa-423 - http://www.redhat.com/support/errata/RHSA-2003-239.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A380 - http://www.debian.org/security/2004/dsa-358
CVE ID: CVE-2003-0551 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:58:11.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which could allow attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-238.html - http://www.debian.org/security/2004/dsa-423 - http://www.redhat.com/support/errata/RHSA-2003-198.html - http://www.redhat.com/support/errata/RHSA-2003-239.html - http://www.debian.org/security/2004/dsa-358 - https://oval.cisecurity.org/repository/search/definiti
HSA-2003-239.html - http://www.debian.org/security/2004/dsa-358 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A384
CVE ID: CVE-2003-0552 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:58:11.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux 2.4.x allows remote attackers to spoof the bridge Forwarding table via forged packets whose source addresses are the same as the target. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-238.html - http://www.debian.org/security/2004/dsa-423 - http://www.redhat.com/support/errata/RHSA-2003-198.html - http://www.redhat.com/support/errata/RHSA-2003-239.html - http://www.debian.org/security/2004/dsa-358 - https://oval.cisecurity.org/repository/search/definition/o
2003-239.html - http://www.debian.org/security/2004/dsa-358 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A385
CVE ID: CVE-2003-0553 State: PUBLISHED Published: 2003-07-15T04:00:00 Last Updated: 2024-08-08T01:58:10.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Client Detection Tool (CDT) plugin (npcdt.dll) for Netscape 7.02 allows remote attackers to execute arbitrary code via an attachment with a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105820193406838&w=2 - http://jimmers.russia.webmatrixhosting.net/whitepapers/CDTbug.pdf
CVE ID: CVE-2003-0554 State: PUBLISHED Published: 2003-07-15T04:00:00 Last Updated: 2024-08-08T01:58:11.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: NeoModus Direct Connect 1.0 build 9, and possibly other versions, allows remote attackers to cause a denial of service (connection and possibly memory exhaustion) via a flood of ConnectToMe requests containing arbitrary IP addresses and ports. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006505.html - http://marc.info/?l=bugtraq&m=105820316708258&w=2
CVE ID: CVE-2003-0555 State: PUBLISHED Published: 2003-07-15T04:00:00 Last Updated: 2024-08-08T01:58:10.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 5.4.3.x and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a "%x" filename, possibly triggering a format string vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105820576111599&w=2
CVE ID: CVE-2003-0556 State: PUBLISHED Published: 2003-07-15T04:00:00 Last Updated: 2024-08-08T01:58:11.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Polycom MGC 25 allows remote attackers to cause a denial of service (crash) via a large number of "user" requests to the control port 5003, as demonstrated using the blast TCP stress tester. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105804648003163&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006494.html
CVE ID: CVE-2003-0557 State: PUBLISHED Published: 2003-07-15T04:00:00 Last Updated: 2024-08-08T01:58:11.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105804683203384&w=2
CVE ID: CVE-2003-0558 State: PUBLISHED Published: 2003-07-15T04:00:00 Last Updated: 2024-08-08T01:58:11.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105795219412333&w=2
CVE ID: CVE-2003-0559 State: PUBLISHED Published: 2003-07-15T04:00:00 Last Updated: 2024-08-08T01:58:10.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: mainfile.php in phpforum 2 RC-1, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by modifying the MAIN_PATH parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105787021803729&w=2
CVE ID: CVE-2003-0560 State: PUBLISHED Published: 2003-07-15T04:00:00 Last Updated: 2024-08-08T01:58:11.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8159 - http://marc.info/?l=bugtraq&m=105733277731084&w=2
CVE ID: CVE-2003-0561 State: PUBLISHED Published: 2003-07-15T04:00:00 Last Updated: 2024-08-08T01:58:11.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP banner, or long responses to the client commands (2) USER, (3) PASS, (4) ACCT, and possibly other commands. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0010.html - http://marc.info/?l=bugtraq&m=105769805311484&w=2
CVE ID: CVE-2003-0562 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:58:10.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denial of service (ABEND) via a long input string. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105897724931665&w=2 - http://www.protego.dk/advisories/200301.html - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0041.html - http://www.kb.cert.org/vuls/id/185593 - http://support.novell.com/servlet/tidfinder/2966549 - http://marc.info/?l=bugtraq&m=1058975612
cert.org/vuls/id/185593 - http://support.novell.com/servlet/tidfinder/2966549 - http://marc.info/?l=bugtraq&m=105897561229347&w=2
CVE ID: CVE-2003-0564 State: PUBLISHED Published: 2003-11-06T05:00:00 Last Updated: 2024-08-08T01:58:10.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions (S/MIME) protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected ASN.1 constructs, as demonstrated using the NISSC test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-110.html - http://marc.info/?l=bugtraq&m=109900315219363&w=2 - https://oval.cisecu
w.redhat.com/support/errata/RHSA-2004-110.html - http://marc.info/?l=bugtraq&m=109900315219363&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11462 - http://www.uniras.gov.uk/vuls/2003/006489/smime.htm - http://www.securityfocus.com/bid/8981 - http://www.redhat.com/support/errata/RHSA-2004-112.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/13603 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A872 - http://marc.info/?l=bugtraq&m=108448379429944&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:021 - ftp://patches.sgi.com/support/free/security/advisories/20040402-01-U.asc - http:
curity/advisories?name=MDKSA-2004:021 - ftp://patches.sgi.com/support/free/security/advisories/20040402-01-U.asc - http://www.kb.cert.org/vuls/id/428230 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A914
CVE ID: CVE-2003-0565 State: PUBLISHED Published: 2003-11-06T05:00:00 Last Updated: 2024-08-08T01:58:11.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in multiple vendor implementations of the X.400 protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an X.400 message containing certain unexpected ASN.1 constructs, as demonstrated using the NISSC test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/927278 - http://www.uniras.gov.uk/vuls/2003/006489/x400.htm
CVE ID: CVE-2003-0567 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:58:11.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/411332 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5603 - http://www.cert.org/advisories/CA-2003-17.html - http://www.cisco.com/warp/public/7
oval%3Aorg.mitre.oval%3Adef%3A5603 - http://www.cert.org/advisories/CA-2003-17.html - http://www.cisco.com/warp/public/707/cisco-sa-20030717-blocked.shtml - http://www.cert.org/advisories/CA-2003-15.html - http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006743.html
CVE ID: CVE-2003-0568 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0569 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0570 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0571 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0572 State: PUBLISHED Published: 2003-08-18T04:00:00 Last Updated: 2024-08-08T01:58:11.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause a denial of service (memory consumption). Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20030701-01-P - https://exchange.xforce.ibmcloud.com/vulnerabilities/12635 - http://www.osvdb.org/8587
CVE ID: CVE-2003-0573 State: PUBLISHED Published: 2003-08-18T04:00:00Z Last Updated: 2024-09-17T04:23:47.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS callbacks in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, do not perform sufficient sanity checking, with unknown impact. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20030701-01-P
CVE ID: CVE-2003-0574 State: PUBLISHED Published: 2003-08-18T04:00:00Z Last Updated: 2024-09-16T20:22:21.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local users to cause a core dump in scheme and possibly gain privileges via certain environment variables, a different vulnerability than CVE-2001-0797 and CVE-1999-0028. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20030702-01-P
CVE ID: CVE-2003-0575 State: PUBLISHED Published: 2003-08-01T04:00:00 Last Updated: 2024-08-08T01:58:10.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUTH_UNIX gid list. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20030704-01-P - http://www.securityfocus.com/bid/8304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12763 - http://secunia.com/advisories/9390 - http://www.ciac.org/ciac/bulletins/n-130.shtml - http://marc.i
nerabilities/12763 - http://secunia.com/advisories/9390 - http://www.ciac.org/ciac/bulletins/n-130.shtml - http://marc.info/?l=bugtraq&m=105958240709302&w=2 - http://www.osvdb.org/2337 - http://www.kb.cert.org/vuls/id/682900
CVE ID: CVE-2003-0576 State: PUBLISHED Published: 2003-08-15T04:00:00 Last Updated: 2024-08-08T01:58:11.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the NFS daemon (nfsd) in SGI IRIX 6.5.19f and earlier allows remote attackers to cause a denial of service (kernel panic) via certain packets that cause XDR decoding errors, a different vulnerability than CVE-2003-0619. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20030801-01-P - ftp://patches.sgi.com/support/free/security/advisories/20030801-02-P
CVE ID: CVE-2003-0577 State: PUBLISHED Published: 2003-07-17T04:00:00 Last Updated: 2024-08-08T01:58:10.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-002.0/CSSA-2004-002.0.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2003:078 - http://www.securityfocus.com/archive/1/306903 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000695 - http://secunia.com/
urityfocus.com/archive/1/306903 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000695 - http://secunia.com/advisories/7875 - http://www.securityfocus.com/bid/6629
CVE ID: CVE-2003-0578 State: PUBLISHED Published: 2003-07-17T04:00:00 Last Updated: 2024-08-08T01:58:11.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users to gain privileges by deleting and overwriting arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105839150004682&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0025.html
CVE ID: CVE-2003-0579 State: PUBLISHED Published: 2003-07-17T04:00:00 Last Updated: 2024-08-08T01:58:11.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and execute the uv.install program, which allows local users to gain privileges by providing a pathname that is under control of the user. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0026.html - http://marc.info/?l=bugtraq&m=105838948002337&w=2
CVE ID: CVE-2003-0580 State: PUBLISHED Published: 2003-07-17T04:00:00 Last Updated: 2024-08-08T01:58:11.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105839042603476&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0028.html
CVE ID: CVE-2003-0581 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:58:10.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: X Fontserver for Truetype fonts (xfstt) 1.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a (1) FS_QueryXExtents8 or (2) FS_QueryXBitmaps8 packet, and possibly other types of packets, with a large num_ranges value, which causes an out-of-bounds array access. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-360 - http://marc.info/?l=bugtraq&m=105829691405446&w=2
CVE ID: CVE-2003-0582 State: REJECTED Published: 2003-07-25T04:00:00 Last Updated: 2003-07-25T09:00:00 Description: No description available.
CVE ID: CVE-2003-0583 State: PUBLISHED Published: 2016-10-17T04:00:00 Last Updated: 2024-08-08T01:58:11.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105846288808846&w=2
CVE ID: CVE-2003-0584 State: PUBLISHED Published: 2016-10-17T04:00:00 Last Updated: 2024-08-08T01:58:10.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105846288808846&w=2
CVE ID: CVE-2003-0585 State: PUBLISHED Published: 2016-10-17T04:00:00 Last Updated: 2024-08-08T01:58:10.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp of Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to bypass authentication and execute arbitrary SQL code via the (1) user or (2) pass parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105845898003616&w=2
CVE ID: CVE-2003-0586 State: PUBLISHED Published: 2016-10-17T04:00:00 Last Updated: 2024-08-08T01:58:11.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105845898003616&w=2
CVE ID: CVE-2003-0587 State: PUBLISHED Published: 2016-10-17T04:00:00 Last Updated: 2024-08-08T01:58:11.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.x allows remote authenticated users to execute arbitrary web script and gain administrative access via the "displayed name" attribute of the "ubber" cookie. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105839276105934&w=2
CVE ID: CVE-2003-0588 State: PUBLISHED Published: 2016-10-17T04:00:00 Last Updated: 2024-08-08T01:58:11.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105839007002993&w=2
CVE ID: CVE-2003-0589 State: PUBLISHED Published: 2016-10-17T04:00:00 Last Updated: 2024-08-08T01:58:11.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105839007002993&w=2
CVE ID: CVE-2003-0590 State: PUBLISHED Published: 2016-10-17T04:00:00 Last Updated: 2024-08-08T01:58:11.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon (image_subject) field. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105830019209609&w=2 - http://members.fortunecity.it/lethalman2002/bugs/splatt.html
CVE ID: CVE-2003-0591 State: REJECTED Published: 2003-07-25T04:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2003-0592 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T01:58:11.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Konqueror to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html - http://archives.ne
Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html - http://www.debian.org/security/2004/dsa-459 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A823 - http://www.redhat.com/support/errata/RHSA-2004-074.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:022
CVE ID: CVE-2003-0593 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T01:58:11.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Opera to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056
.org.uk/pipermail/full-disclosure/2004-March/018475.html - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html