Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-0458 State: PUBLISHED Published: 2003-07-17T04:00:00Z Last Updated: 2024-09-16T17:15:09.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in HP NonStop Server D40.00 through D48.03, and G01.00 through G06.20, allows local users to gain additional privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/advisories/5545 - http://www.securityfocus.com/bid/8080
CVE ID: CVE-2003-0459 State: PUBLISHED Published: 2003-08-01T04:00:00 Last Updated: 2024-08-08T01:58:09.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007300.html - http://www.kde.org/info/security/advisory-20030729-1.txt - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000747 - http://www.debian.
security/advisory-20030729-1.txt - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000747 - http://www.debian.org/security/2003/dsa-361 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A411 - http://marc.info/?l=bugtraq&m=105986238428061&w=2 - http://www.redhat.com/support/errata/RHSA-2003-236.html - http://www.redhat.com/support/errata/RHSA-2003-235.html - http://www.turbolinux.com/security/TLSA-2003-45.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2003:079
CVE ID: CVE-2003-0460 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:58:09.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rotatelogs program on Apache before 1.3.28, for Windows and OS/2 systems, does not properly ignore certain control characters that are received over the pipe, which could allow remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.apache.org/dist/httpd/Announcement.html - http://www.kb.cert.org/vuls/id/694428 - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache
hread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%4
s.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2003-0461 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:58:10.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: /proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-238.html - http://www.debian.org/security/2004/dsa-423 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A304 - http://rsbac.dyndns.org/pipermail/rsbac/2002-May/000162.html -
ry/search/definition/oval%3Aorg.mitre.oval%3Adef%3A304 - http://rsbac.dyndns.org/pipermail/rsbac/2002-May/000162.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A997 - http://www.redhat.com/support/errata/RHSA-2004-188.html - http://www.debian.org/security/2004/dsa-358 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9330
CVE ID: CVE-2003-0462 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:58:09.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-238.html - http://www.debian.org/security/2004/dsa-423 - http://www.redhat.com/support/errata/RHSA-2003-198.html - http://www.redhat.com/support/errata/RHSA-2003-239.html - https://oval.cisecurity.org/repository/search/def
3-198.html - http://www.redhat.com/support/errata/RHSA-2003-239.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A309 - http://www.debian.org/security/2004/dsa-358
CVE ID: CVE-2003-0463 State: REJECTED Published: 2006-02-08T01:00:00Z Last Updated: 2024-09-16T23:20:40.229Z Description: No description available.
CVE ID: CVE-2003-0464 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:58:10.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow local users to bind to UDP ports that are used by privileged services such as nfsd. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-238.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A311
CVE ID: CVE-2003-0465 State: PUBLISHED Published: 2003-07-15T04:00:00 Last Updated: 2024-08-08T01:58:10.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-188.html - http://marc.info/?l=linux-kernel&m=105796415223490&w=2 - http://marc.info/?l=linux-kernel&m=105796021120436&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.
.info/?l=linux-kernel&m=105796021120436&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10285
CVE ID: CVE-2003-0466 State: PUBLISHED Published: 2003-08-01T04:00:00 Last Updated: 2024-08-08T01:58:10.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106002488209129&w=2 - http://isec.pl/vulnerabilities/isec-0011-wu-ftpd.
ner: References: - http://marc.info/?l=bugtraq&m=106002488209129&w=2 - http://isec.pl/vulnerabilities/isec-0011-wu-ftpd.txt - http://secunia.com/advisories/9446 - http://www.osvdb.org/6602 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1970 - http://www.securityfocus.com/archive/1/424852/100/0/threaded - http://www.securityfocus.com/bid/8315 - http://secunia.com/advisories/9423 - http://marc.info/?l=bugtraq&m=105967301604815&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0065.html - http://download.immunix.org/ImmunixOS/7+/Updates/errata/IMNX-2003-7+-019-01 - http://www.redhat.com/support/errata/RHSA-2003-246.html - http://www.securit
xOS/7+/Updates/errata/IMNX-2003-7+-019-01 - http://www.redhat.com/support/errata/RHSA-2003-246.html - http://www.securityfocus.com/archive/1/425061/100/0/threaded - http://www.kb.cert.org/vuls/id/743092 - http://www.redhat.com/support/errata/RHSA-2003-245.html - http://www.novell.com/linux/security/advisories/2003_032_wuftpd.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001257.1-1 - http://www.debian.org/security/2003/dsa-357 - http://marc.info/?l=bugtraq&m=106001702232325&w=2 - http://securitytracker.com/id?1007380 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12785 - http://marc.info/?l=bugtraq&m=
sories?name=MDKSA-2003:080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12785 - http://marc.info/?l=bugtraq&m=106001410028809&w=2 - http://www.turbolinux.com/security/TLSA-2003-46.txt - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-011.txt.asc - http://secunia.com/advisories/9535 - http://secunia.com/advisories/9447
CVE ID: CVE-2003-0467 State: PUBLISHED Published: 2003-08-05T04:00:00 Last Updated: 2024-08-08T01:58:10.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in ip_nat_sack_adjust of Netfilter in Linux kernels 2.4.20, and some 2.5.x, when CONFIG_IP_NF_NAT_FTP or CONFIG_IP_NF_NAT_IRC is enabled, or the ip_nat_ftp or ip_nat_irc modules are loaded, allows remote attackers to cause a denial of service (crash) in systems using NAT, possibly due to an integer signedness error. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105985703724758&w=2
CVE ID: CVE-2003-0468 State: PUBLISHED Published: 2003-08-05T04:00:00 Last Updated: 2024-08-08T01:58:10.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate with the target on the associated port. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000717 - http://www.securityfocus.com/bid/8333 - http://www.mandriva.com
tro.conectiva.com.br/atualizacoes/?id=a&anuncio=000717 - http://www.securityfocus.com/bid/8333 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:081 - http://www.redhat.com/support/errata/RHSA-2003-251.html - http://www.debian.org/security/2003/dsa-363 - http://marc.info/?l=bugtraq&m=106001525130257&w=2 - http://www.novell.com/linux/security/advisories/2003_033_postfix.html - http://secunia.com/advisories/9433 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A522
CVE ID: CVE-2003-0469 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align" argument in an HR tag. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105639925122961&w=2 - http://www.cert.org/advisories/CA-2003-14.html - http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/006067
2 - http://www.cert.org/advisories/CA-2003-14.html - http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/006067.html - http://www.securityfocus.com/bid/8016 - http://www.kb.cert.org/vuls/id/823260 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-023 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006155.html
CVE ID: CVE-2003-0470 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:09.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1007029 - http://www.securityfocus.com/bid/8008 - http://marc.info/?l=bugtraq&m=105647537823877&w=2 - http://secunia.com/advisories/9091 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
=bugtraq&m=105647537823877&w=2 - http://secunia.com/advisories/9091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12423 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/006014.html - http://www.kb.cert.org/vuls/id/527228
CVE ID: CVE-2003-0471 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a long USER argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8024 - http://marc.info/?l=bugtraq&m=105648385900792&w=2 - http://www.osvdb.org/2207 - http://marc.info/?l=bugtraq&m=105647081418155&w=2
CVE ID: CVE-2003-0472 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service (hang) in inetd via port scanning. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8027 - ftp://patches.sgi.com/support/free/security/advisories/20030607-01-P - https://exchange.xforce.ibmcloud.com/vulnerabilities/12676 - http://www.osvdb.org/8585
CVE ID: CVE-2003-0473 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20030607-01-P - https://exchange.xforce.ibmcloud.com/vulnerabilities/12677 - http://www.osvdb.org/8586 - http://www.securityfocus.com/bid/8029
CVE ID: CVE-2003-0474 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:09.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in iWeb Server allows remote attackers to read arbitrary files via an HTTP request containing .. sequences, a different vulnerability than CVE-2003-0475. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105049794801319&w=2 - http://marc.info/?l=bugtraq&m=105673543626636&w=2
CVE ID: CVE-2003-0475 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request containing URL-encoded .. sequences ("%5c%2e%2e"), a different vulnerability than CVE-2003-0474. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105640001823769&w=2 - http://marc.info/?l=bugtraq&m=105673543626636&w=2
CVE ID: CVE-2003-0476 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A327 - http://marc.info/?l=bugtraq&m=105664924024009&w=2 - http://www.redhat.com/support/errata/RHSA-2003-238.html - http://www.debian.org/security/2004/dsa-423 - http://
09&w=2 - http://www.redhat.com/support/errata/RHSA-2003-238.html - http://www.debian.org/security/2004/dsa-423 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:074 - http://www.redhat.com/support/errata/RHSA-2003-408.html - http://www.debian.org/security/2004/dsa-358 - http://www.redhat.com/support/errata/RHSA-2003-368.html
CVE ID: CVE-2003-0477 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: wzdftpd 0.1rc4 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command without an argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105674242105302&w=2 - http://www.wzdftpd.net/changea.html
CVE ID: CVE-2003-0478 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:11.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) methane 0.1.1, (4) AndromedeIRCd 1.2.3-Release, and (5) ircd-RU, when running in debug mode, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request containing format strings. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105665996104723&w=2 - http://marc.info/?l=bugtraq&m=105673489525906&w=2 -
r: References: - http://marc.info/?l=bugtraq&m=105665996104723&w=2 - http://marc.info/?l=bugtraq&m=105673489525906&w=2 - http://marc.info/?l=bugtraq&m=105673555726823&w=2
CVE ID: CVE-2003-0479 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the guestbook for WebBBS allows remote attackers to insert arbitrary web script via the (1) Name, (2) Email, or (3) Message fields. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105673452325230&w=2
CVE ID: CVE-2003-0480 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipulation." Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=1019 - http://marc.info/?l=bugtraq&m=105673688529147&w=2
CVE ID: CVE-2003-0481 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated using the msg parameter to file_select.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105638743109781&w=2
CVE ID: CVE-2003-0482 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly accessing the uploaded code via a request to the repository containing the code. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105638743109781&w=2
CVE ID: CVE-2003-0483 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via (1) the member parameter to member.php or (2) the action parameter to buddy.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105638720409307&w=2 - https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE ID: CVE-2003-0484 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:11.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the topic_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105639883722514&w=2
CVE ID: CVE-2003-0485 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:11.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, invalid data type. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105613243117155&w=2 - http://www.securityfocus.com/bid/7997
CVE ID: CVE-2003-0486 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:11.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7979 - http://www.phpbb.com/phpBB/viewtopic.php?t=112052 - http://marc.info/?l=bugtraq&m=105607263130644&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12366
CVE ID: CVE-2003-0487 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parameter in the do_subscribe module, (2) a long folder parameter in the add_acl module, (3) a long folder parameter in the list module, and (4) a long user parameter in the do_map module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7967 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12368 - htt
: References: - http://www.securityfocus.com/bid/7967 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12368 - http://nautopia.org/vulnerabilidades/kerio_mailserver.htm - http://marc.info/?l=bugtraq&m=105596982503760&w=2
CVE ID: CVE-2003-0488 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:58:10.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1) the add_name parameter in the add_acl module, or (2) the alias parameter in the do_map module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7968 - http://nautopia.org/vulnerabilidades/kerio_mailserver.htm - http://www.securityfocus.com/bid/7966 - http://marc.info/?l=bugtraq&m=105596982503760&w=2 - https://exchange.xforce.ibmcloud.com/vul
ecurityfocus.com/bid/7966 - http://marc.info/?l=bugtraq&m=105596982503760&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12367