Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-1025 State: PUBLISHED Published: 2004-01-06T05:00:00 Last Updated: 2024-08-08T02:12:35.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A510 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
definition/oval%3Aorg.mitre.oval%3Adef%3A510 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A526 - http://www.kb.cert.org/vuls/id/652278 - http://www.securityfocus.com/archive/1/346948 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13935 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A491 - http://www.us-cert.gov/cas/techalerts/TA04-033A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A512 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
nition/oval%3Aorg.mitre.oval%3Adef%3A512 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A490 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004 - http://www.zapthedingbat.com/security/ex01/vun1.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A511
CVE ID: CVE-2003-1026 State: PUBLISHED Published: 2004-01-08T05:00:00 Last Updated: 2024-08-08T02:12:35.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the "Travel Log Cross Domain Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.safecenter.net/UMBRELLAWEBV4/BackToFramedJpu - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg
//www.safecenter.net/UMBRELLAWEBV4/BackToFramedJpu - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A630 - http://www.kb.cert.org/vuls/id/784102 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A689 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A774 - http://marc.info/?l=bugtraq&m=107038202225587&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A687 - http://www.us-cert.gov/cas/techalerts/TA04-033A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A805 - https://docs.microsoft.com/en-us/se
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A805 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A643 - http://marc.info/?l=bugtraq&m=106979349517578&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13846 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A745
CVE ID: CVE-2003-1027 State: PUBLISHED Published: 2004-01-08T05:00:00 Last Updated: 2024-08-08T02:12:35.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3
Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A527 - http://www.kb.cert.org/vuls/id/413886 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A629 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A531 - http://www.safecenter.net/UMBRELLAWEBV4/HijackClickV2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A530 - http://marc.info/?l=bugtraq&m=107038202225587&w=2 - http://www.us-cert.gov/cas/techalerts/TA04-033A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004 - https:/
/techalerts/TA04-033A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A532 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A534 - http://marc.info/?l=bugtraq&m=106979479719446&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13844 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A529 - http://www.securitytracker.com/id?1006036
CVE ID: CVE-2003-1028 State: PUBLISHED Published: 2004-01-08T05:00:00 Last Updated: 2024-08-08T02:12:35.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an invalid ContentType and a .htm file, which could allow remote attackers to bypass security mechanisms that rely on random names, as demonstrated by threadid10008. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/7890 - http://marc.info/?l=bugtraq&m=107038202225587&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13847 - http://marc.info/?l=bugtra
=bugtraq&m=107038202225587&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13847 - http://marc.info/?l=bugtraq&m=106979428718705&w=2 - http://www.safecenter.net/UMBRELLAWEBV4/threadid10008 - http://marc.info/?l=bugtraq&m=106979624321665&w=2
CVE ID: CVE-2003-1029 State: PUBLISHED Published: 2004-01-15T05:00:00 Last Updated: 2024-08-08T02:12:35.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_print to use a bad length value when calling print_octets. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10718 - http://secunia.com/advisories/10668 - http://marc.info/?l=tcpdump-workers&m=107228187124962&w=2 - http://secunia.com/advisories/10636 - http://www.securi
68 - http://marc.info/?l=tcpdump-workers&m=107228187124962&w=2 - http://secunia.com/advisories/10636 - http://www.securitytracker.com/id?1008748 - http://lwn.net/Alerts/66805/ - http://www.mandriva.com/security/advisories?name=MDKSA-2004:008 - http://www.securityfocus.com/archive/1/350238/30/21640/threaded - http://www.debian.org/security/2004/dsa-425 - http://secunia.com/advisories/10652 - http://marc.info/?l=bugtraq&m=107213553214985&w=2 - http://marc.info/?l=bugtraq&m=107193841728533&w=2
CVE ID: CVE-2003-1030 State: PUBLISHED Published: 2004-01-15T05:00:00 Last Updated: 2024-08-08T02:12:35.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in DameWare Mini Remote Control before 3.73 allows remote attackers to execute arbitrary code via a long pre-authentication request to TCP port 6129. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14001 - http://www.kb.cert.org/vuls/id/909678 - http://marc.info/?l=bugtraq&m=107187110617266&w=2 - http://marc.info/?l=bugtraq&m=107152094119279&w=2 - http://sh0dan.org/files/dwmrcs372.txt - http://marc.info
17266&w=2 - http://marc.info/?l=bugtraq&m=107152094119279&w=2 - http://sh0dan.org/files/dwmrcs372.txt - http://marc.info/?l=bugtraq&m=107392603615840&w=2
CVE ID: CVE-2003-1031 State: PUBLISHED Published: 2004-01-22T05:00:00Z Last Updated: 2024-09-17T01:12:05.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as (1) "Interests-Hobbies", (2) "Biography", or (3) "Occupation." Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0078.html
CVE ID: CVE-2003-1032 State: PUBLISHED Published: 2004-01-26T05:00:00 Last Updated: 2024-08-08T02:12:35.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink, allows remote attackers to cause a denial of service (crash) via a malformed URL to the web server, possibly involving a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105465813729100&w=2 - http://securitytracker.com/id?1006913 - http://www.securityfocus.com/bid/7787 - http://marc.info/?l=bugtraq&m=105484265218325&w=2
CVE ID: CVE-2003-1033 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T02:12:36.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) instdbmsrv and (2) instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT environment variable as a path when assigning setuid permissions to the lserver program, which allows local users to gain root privileges via a modified INSTROOT that points to a malicious dbmsrv or lserver program. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11842 - http://www.securityfocus.com/bid/7407 - http://listserv.sap.com/pipermail/sap
force.ibmcloud.com/vulnerabilities/11842 - http://www.securityfocus.com/bid/7407 - http://listserv.sap.com/pipermail/sapdb.sources/2003-April/000143.html - http://www.securityfocus.com/bid/7408 - http://marc.info/?l=bugtraq&m=105103613727471&w=2
CVE ID: CVE-2003-1034 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T02:12:35.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPM installation of SAP DB 7.x creates the (1) dbmsrv or (2) lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11669 - http://www.securityfocus.com/bid/7242 - http://marc.info/?l=bugtraq&m=104914778303805&w=2
CVE ID: CVE-2003-1035 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T02:12:35.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7007 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004039.html - http://www.securityfocus.com/archive/1/451378/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnera
04039.html - http://www.securityfocus.com/archive/1/451378/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/11487
CVE ID: CVE-2003-1036 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T02:12:35.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code via long (1) ~command, (2) ~runtimemode, or (3) ~session parameters, or (4) a long HTTP Content-Type header. Additional Analyst Notes: - CVE Program Container: References: - http://www.phenoelit.de/stuff/Phenoelit20c3.pd - https://exchange.xforce.ibmcloud.com/vulnerabilities/14186
CVE ID: CVE-2003-1037 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T02:12:35.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS) allows remote attackers to execute arbitrary code via a high "trace level." Additional Analyst Notes: - CVE Program Container: References: - http://www.phenoelit.de/stuff/Phenoelit20c3.pd - http://securitytracker.com/id?1009453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15514
CVE ID: CVE-2003-1038 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T02:12:35.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames. Additional Analyst Notes: - CVE Program Container: References: - http://www.phenoelit.de/stuff/Phenoelit20c3.pd - https://exchange.xforce.ibmcloud.com/vulnerabilities/15516
CVE ID: CVE-2003-1039 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T02:12:35.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute arbitrary code via a long HTTP Host header to (1) Message Server, (2) Web Dispatcher, or (3) Application Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.phenoelit.de/stuff/Phenoelit20c3.pd - https://exchange.xforce.ibmcloud.com/vulnerabilities/15513
CVE ID: CVE-2003-1040 State: PUBLISHED Published: 2004-03-23T05:00:00 Last Updated: 2024-08-08T02:12:35.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service (crash) by sending certain signals to kmod. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2003_049_kernel.html - ftp://patches.sgi.com/support/free/security/advisories/20040204-01-U.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/15577 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820 - http://www.redhat.com/s
d.com/vulnerabilities/15577 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820 - http://www.redhat.com/support/errata/RHSA-2004-069.html - http://www.redhat.com/support/errata/RHSA-2004-188.html - http://www.redhat.com/support/errata/RHSA-2004-106.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9423 - http://linux.bkbits.net:8080/linux-2.4/diffs/kernel/kmod.c%401.6?nav=index.html%7Csrc/%7Csrc/kernel%7Chist/kernel/kmod.c - http://www.redhat.com/support/errata/RHSA-2004-065.html
CVE ID: CVE-2003-1041 State: PUBLISHED Published: 2004-05-20T04:00:00 Last Updated: 2024-08-08T02:12:35.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm extension. NOTE: this bug may overlap CVE-2004-0475. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA04-196A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1
cas/techalerts/TA04-196A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1186 - http://www.securityfocus.com/bid/9320 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-023 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1943 - http://www.kb.cert.org/vuls/id/187196 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A956 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3514 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14105 - http://www.securityfocus.com/archive/1/348521
CVE ID: CVE-2003-1042 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T02:12:35.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and earlier allows remote authenticated users with editproducts privileges to execute arbitrary SQL via the product name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/343185 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774 - http://bugzilla.mozilla.org/show_bug.cgi?id=214290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13594 - http://www.securityfocus.com/bid/8953
CVE ID: CVE-2003-1043 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T02:12:35.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/343185 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774 - http://bugzilla.mozilla.org/show_bug.cgi?id=219044 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13596 - http://www.securityfo
.mozilla.org/show_bug.cgi?id=219044 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13596 - http://www.securityfocus.com/bid/8953
CVE ID: CVE-2003-1044 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T02:12:35.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: editproducts.cgi in Bugzilla 2.16.3 and earlier, when usebuggroups is enabled, does not properly remove group add privileges from a group that is being deleted, which allows users with those privileges to perform unauthorized additions to the next group that is assigned with the original group ID. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/343185 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13597 - http://bugzilla.mozilla.org/show_bug.cgi?id=219690 - http:/
https://exchange.xforce.ibmcloud.com/vulnerabilities/13597 - http://bugzilla.mozilla.org/show_bug.cgi?id=219690 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774 - http://www.securityfocus.com/bid/8953
CVE ID: CVE-2003-1045 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T02:12:35.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: votes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote attackers to read a user's voting page when that user has voted on a restricted bug, which allows remote attackers to read potentially sensitive voting information by modifying the who parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/343185 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13600 - http://www.s
iva.com.br/atualizacoes/?id=a&anuncio=000774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13600 - http://www.securityfocus.com/bid/8953 - http://bugzilla.mozilla.org/show_bug.cgi?id=209376
CVE ID: CVE-2003-1046 State: PUBLISHED Published: 2004-06-03T04:00:00 Last Updated: 2024-08-08T02:12:35.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows remote attackers to list component descriptions for otherwise restricted products. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/343185 - http://bugzilla.mozilla.org/show_bug.cgi?id=209742 - http://www.securityfocus.com/bid/8953 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13602
CVE ID: CVE-2003-1047 State: REJECTED Published: 2004-06-08T04:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2003-1048 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T02:12:35.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/685364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16804 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009506.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A509 - https:/
ember/009506.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A509 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A236 - http://www.securityfocus.com/bid/8530 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009445.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1793 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A206 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009473.html - http://www.us-cert.gov/
/2004/ms04-025 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009473.html - http://www.us-cert.gov/cas/techalerts/TA04-212A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A517 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2100 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A212 - http://www.ciac.org/ciac/bulletins/o-191.shtml
CVE ID: CVE-2003-1049 State: PUBLISHED Published: 2004-08-20T04:00:00 Last Updated: 2024-08-08T02:12:35.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to modify or delete certain DB2 files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14030 - http://www.securityfocus.com/bid/9243 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY44841&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IY44842&apar=only
CVE ID: CVE-2003-1050 State: PUBLISHED Published: 2004-08-20T04:00:00 Last Updated: 2024-08-08T02:12:35.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long command line arguments to (1) db2start, (2) db2stop, or (3) db2govd. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13633 - http://www.securityfocus.com/bid/8990 - http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt - http://www.securityfocus.com/archive/1/343804