Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-0489 State: PUBLISHED Published: 2003-06-28T04:00:00Z Last Updated: 2024-09-16T18:04:02.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-330
CVE ID: CVE-2003-0490 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical directories and files with world-writable permissions, which allows local users to gain privileges as other users by replacing programs with malicious code. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105579526026992&w=2
CVE ID: CVE-2003-0491 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=vuln-dev&m=105577873506147&w=2 - http://marc.info/?l=vuln-dev&m=105577873506147&w=2
CVE ID: CVE-2003-0492 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web script via the Search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105578322012128&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12325 - http://www.securityfocus.com/bid/7922
CVE ID: CVE-2003-0493 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:11.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after obtaining a valid session ID. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105578322012128&w=2 - http://www.securityfocus.com/bid/7924
CVE ID: CVE-2003-0494 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modified member id. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105578322012128&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12326 - http://www.securityfocus.com/bid/7925
CVE ID: CVE-2003-0495 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105578330812212&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12304 - http://www.securityfocus.com/bid/7920
CVE ID: CVE-2003-0496 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:58:11.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105820282607865&w=2 - http://www.atstake.com/research/advisories/2003/a070803-1.txt - http://marc.info/?l=bugtraq&m=105830986720243&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0013.html
CVE ID: CVE-2003-0497 State: PUBLISHED Published: 2003-07-04T04:00:00 Last Updated: 2024-08-08T01:58:10.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs. Additional Analyst Notes: - CVE Program Container: References: - http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=7 - https://www.intersystems.com/support-learning/support/product-news-alerts/support-alerts-2003/
CVE ID: CVE-2003-0498 State: PUBLISHED Published: 2003-07-04T04:00:00 Last Updated: 2024-08-08T01:58:11.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Caché Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows local users to execute arbitrary code by adding server-side scripts that are executed with root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=7 - https://www.intersystems.com/support-learning/support/product-news-alerts/support-alerts-2003/
CVE ID: CVE-2003-0499 State: PUBLISHED Published: 2003-07-04T04:00:00 Last Updated: 2024-08-08T01:58:10.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2003/dsa-335
CVE ID: CVE-2003-0500 State: PUBLISHED Published: 2003-07-04T04:00:00 Last Updated: 2024-08-08T01:58:10.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005826.html - http://www.debian.org/security/2003/dsa-338
CVE ID: CVE-2003-0501 State: PUBLISHED Published: 2003-07-04T04:00:00 Last Updated: 2024-08-08T01:58:10.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-238.html - http://www.debian.org/security/2004/dsa-423 - http://www.redhat.com/support/errata/RHSA-2003-198.html - http://www.redhat.com/support/errata/RHSA-2003-239.html -
23 - http://www.redhat.com/support/errata/RHSA-2003-198.html - http://www.redhat.com/support/errata/RHSA-2003-239.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A328 - http://marc.info/?l=bugtraq&m=105621758104242 - http://www.debian.org/security/2004/dsa-358
CVE ID: CVE-2003-0502 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:58:10.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0421. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html - http://www.rapid7.com/advisories/R7-0015.html
CVE ID: CVE-2003-0503 State: PUBLISHED Published: 2003-07-04T04:00:00 Last Updated: 2024-08-08T01:58:11.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service or execute arbitrary code via a long third argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105725489003575&w=2 - http://marc.info/?l=ntbugtraq&m=105724538222772&w=2 - http://www.lac.co.jp/security/intelligence/SNSAdvisory/65.html
CVE ID: CVE-2003-0504 State: PUBLISHED Published: 2003-07-04T04:00:00 Last Updated: 2024-08-08T01:58:11.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware 0.9.14.003 (aka webdistro) allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to index.php in the addressbook module. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105718361607981&w=2 - http://www.security-corporation.com/articles-20030702-005.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:077 - http://distro.conectiva.com.br/atualizacoes/?id=a&anunc
ttp://www.mandriva.com/security/advisories?name=MDKSA-2003:077 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000697 - http://www.debian.org/security/2003/dsa-365
CVE ID: CVE-2003-0505 State: PUBLISHED Published: 2003-07-04T04:00:00 Last Updated: 2024-08-08T01:58:11.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (dot dot) sequences in a file transfer request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7931 - http://marc.info/?l=bugtraq&m=105716650021546&w=2
CVE ID: CVE-2003-0506 State: PUBLISHED Published: 2003-07-04T04:00:00 Last Updated: 2024-08-08T01:58:11.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malformed packets, as demonstrated via the chat conversation. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105716650021546&w=2
CVE ID: CVE-2003-0507 State: PUBLISHED Published: 2003-07-04T04:00:00 Last Updated: 2024-08-08T01:58:10.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service (reboot) and possibly execute arbitrary code via an LDAP version 3 search request with a large number of (1) "AND," (2) "OR," and possibly other statements, which causes LSASS.EXE to crash. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/default.aspx?kbid=319709 - http://www.securityfocus.com/bid/7930 - http://marc.info/?l=bugtraq&m=105716669921775&w=2 - h
default.aspx?kbid=319709 - http://www.securityfocus.com/bid/7930 - http://marc.info/?l=bugtraq&m=105716669921775&w=2 - http://secunia.com/advisories/9171 - http://www.kb.cert.org/vuls/id/594108
CVE ID: CVE-2003-0508 State: PUBLISHED Published: 2003-07-04T04:00:00 Last Updated: 2024-08-08T01:58:10.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader (acroread) 5.0.7 and earlier allows remote attackers to execute arbitrary code via a .pdf file with a long mailto link. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105785749721291&w=2 - http://marc.info/?l=bugtraq&m=105709569312583&w=2
CVE ID: CVE-2003-0509 State: PUBLISHED Published: 2003-07-04T04:00:00 Last Updated: 2024-08-08T01:58:11.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105709450711395&w=2 - http://www.securityfocus.com/bid/14103 - http://www.osvdb.org/10099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12485 - http://www.securityfocus.com/bid/14101 - http://
rg/10099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12485 - http://www.securityfocus.com/bid/14101 - http://www.osvdb.org/10100 - http://securitytracker.com/id?1007092 - http://www.securityfocus.com/bid/14112 - http://www.osvdb.org/10098 - http://secunia.com/advisories/9165
CVE ID: CVE-2003-0510 State: PUBLISHED Published: 2003-07-04T04:00:00 Last Updated: 2024-08-08T01:58:10.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in ezbounce 1.0 through 1.50 allows remote attackers to execute arbitrary code via the "sessions" command. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105709355110281&w=2 - http://druglord.freelsd.org/ezbounce/
CVE ID: CVE-2003-0511 State: PUBLISHED Published: 2003-07-29T04:00:00 Last Updated: 2024-08-08T01:58:11.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server for Cisco Aironet AP1x00 Series Wireless devices running certain versions of IOS 12.2 allow remote attackers to cause a denial of service (reload) via a malformed URL. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0055.html - http://www.cisco.com/warp/public/707/cisco-sa-20030728-ap1x00.shtml - http://www.vigilante.com/inetsecurity/advisories/VIGILANTE-2003001.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitr
inetsecurity/advisories/VIGILANTE-2003001.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5834
CVE ID: CVE-2003-0512 State: PUBLISHED Published: 2003-07-29T04:00:00 Last Updated: 2024-08-08T01:58:11.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 and earlier generates a "% Login invalid" message instead of prompting for a password when an invalid username is provided, which allows remote attackers to identify valid usernames on the system and conduct brute force password guessing, as reported for the Aironet Bridge. Additional Analyst Notes: - CVE Program Container: References: - http://www.vigilante.com/inetsecurity/advisories/VIGILANTE-2003002.htm - http://www.cisco.com/warp/public/707/cisco-sn-20030724-ios-enum.shtml - https://oval.cisecurity.org/repo
E-2003002.htm - http://www.cisco.com/warp/public/707/cisco-sn-20030724-ios-enum.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5824 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0056.html - http://www.kb.cert.org/vuls/id/886796
CVE ID: CVE-2003-0513 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T01:58:10.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Internet Explorer to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html - http://archives.neohapsis.c
r: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html
CVE ID: CVE-2003-0514 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T01:58:10.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Safari to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html - http://archives.neohapsis.com/archives/vulnwatch/2004
sts.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html
CVE ID: CVE-2003-0515 State: PUBLISHED Published: 2003-07-10T04:00:00Z Last Updated: 2024-09-16T23:20:53.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerabilities in the (1) PostgreSQL or (2) MySQL authentication modules for teapop 0.3.5 and earlier allow attackers to execute arbitrary SQL and possibly gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-347
CVE ID: CVE-2003-0516 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:58:11.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in (1) caller ID or (2) caller name strings. Additional Analyst Notes: - CVE Program Container: References: - ftp://alpha.greenie.net/pub/mgetty/source/1.1/mgetty1.1.29-Nov25.tar.gz
CVE ID: CVE-2003-0517 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:58:11.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files. Additional Analyst Notes: - CVE Program Container: References: - ftp://alpha.greenie.net/pub/mgetty/source/1.1/mgetty1.1.29-Nov25.tar.gz
CVE ID: CVE-2003-0518 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:58:10.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The screen saver in MacOS X allows users with physical access to cause the screen saver to crash and gain access to the underlying session via a large number of characters in the password field, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-07/0187.html - http://archives.neohapsis.com/archives/bugtraq/2003-07/0034.html - http://docs.info.apple.com/article.html?artnum=120232
CVE ID: CVE-2003-0519 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:58:10.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain versions of Internet Explorer 5 and 6, in certain Windows environments, allow remote attackers to cause a denial of service (freeze) via a URL to C:\aux (MS-DOS device name) and possibly other devices. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006286.html
CVE ID: CVE-2003-0520 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:58:11.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trillian 1.0 Pro and 0.74 Freeware allows remote attackers to cause a denial of service (crash) via a TypingUser message in which the "TypingUser" string has been modified. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105735714318026&w=2 - http://www.securityfocus.com/bid/8107
CVE ID: CVE-2003-0521 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:58:10.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via script in a URL that is logged but not properly quoted when displayed via the (1) Error Log or (2) Latest Visitors screens. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105760556627616&w=2
CVE ID: CVE-2003-0522 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:58:11.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via the idadmin parameter to login.asp or (2) gain other privileges via the Email parameter to Custva.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105760660928715&w=2 - http://marc.info/?l=bugtraq&m=105733145930031&w=2
CVE ID: CVE-2003-0523 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:58:11.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in msg.asp for certain versions of ProductCart allow remote attackers to execute arbitrary web script via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105761696706800&w=2
CVE ID: CVE-2003-0524 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:58:10.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on the qt_plugins_3.0rc temporary file in the .qt directory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105769387706906&w=2
CVE ID: CVE-2003-0525 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:58:10.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service (crash) via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string to the java.io.getCanonicalPath Java method. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a072303-1.txt - https://docs.microsoft.com/en-us/security-updates/securitybu
://www.atstake.com/research/advisories/2003/a072303-1.txt - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-029 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A319 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12701
CVE ID: CVE-2003-0526 State: PUBLISHED Published: 2003-07-17T04:00:00 Last Updated: 2024-08-08T01:58:11.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages (1) 500.htm for "500 Internal Server error" or (2) 404.htm for "404 Not Found." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=ntbugtraq&m=105838590030409&w=2 - http://marc.info/?l=bugtraq&m=105838862201266&w=2 - h