Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-1426 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPT_FILENAME environment variable to Perl's @INC include array, which allows local users to execute arbitrary code by modifying SCRIPT_FILENAME to reference a directory containing a malicious openwebmail-shared.pl executable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6885 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0087.html - https://exchange.xforce.ibmcloud.com/vulnerabiliti
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0087.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11357
CVE ID: CVE-2003-1427 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:02.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web configuration interface in Netgear FM114P 1.4 allows remote attackers to read arbitrary files, such as the netgear.cfg configuration file, via a hex-encoded (%2e%2e%2f) ../ (dot dot slash) in the port parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6807 - http://www.securityfocus.com/archive/1/311160 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11279
CVE ID: CVE-2003-1428 State: PUBLISHED Published: 2007-10-20T10:00:00 Last Updated: 2024-08-08T02:28:03.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6809 - http://www.securityfocus.com/archive/1/311161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11284
CVE ID: CVE-2003-1429 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Proxomitron Naoko 4.4 allows remote attackers to execute arbitrary code via a long request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11364 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0088.html
CVE ID: CVE-2003-1430 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote attackers to access known files via a ".." (dot dot) in an unreal:// URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6775 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html - http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11299
CVE ID: CVE-2003-1431 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (crash) via a long host string in the Unreal URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11301 - http://www.pivx.com/luigi/adv/ueng-adv.txt - http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html - http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html - http://www.securityfocus.com/bid/6774
CVE ID: CVE-2003-1432 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with a negative size value, which is treated as a large positive number during memory allocation, or (2) a negative size value in a package file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11305 - http://www.securityfocus
mcloud.com/vulnerabilities/11302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11305 - http://www.securityfocus.com/bid/6770 - http://www.securityfocus.com/bid/6772 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html - http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/12012 - http://archives.neohapsis.com/archives/bugtraq/2003-05/0142.html
CVE ID: CVE-2003-1433 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game multiple times. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6771 - http://www.pivx.com/luigi/adv/ueng-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/11304 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html - http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html
CVE ID: CVE-2003-1434 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: login_ldap 3.1 and 3.2 allows remote attackers to initiate unauthenticated bind requests if (1) bind_anon_dn is on, which allows a bind with no password provided, (2) bind_anon_cred is on, which allows a bind with no DN, or (3) bind_anon is on, which allows a bind with no DN or password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6903 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0244.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11374
CVE ID: CVE-2003-1435 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary SQL commands via the days parameter to the search module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6887 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0246.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11375
CVE ID: CVE-2003-1436 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in nukebrowser.php in Nukebrowser 2.1 to 2.5 allows remote attackers to execute arbitrary PHP code via the filhead parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1006031 - http://www.securityfocus.com/bid/6731 - http://secunia.com/advisories/7986 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11217
CVE ID: CVE-2003-1437 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-25.jsp - http://www.securityfocus.com/bid/6719 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11220
CVE ID: CVE-2003-1438 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in BEA WebLogic Server and Express 5.1 through 7.0.0.1, when using in-memory session replication or replicated stateful session beans, causes the same buffer to be provided to two users, which could allow one user to see session data that was intended for another user. Additional Analyst Notes: - CVE Program Container: References: - http://dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-26.01.jsp - http://www.securitytracker.com/id?1006018 - http://www.securityfocus.com/bid/6717 - https://exchange.xfor
03-26.01.jsp - http://www.securitytracker.com/id?1006018 - http://www.securityfocus.com/bid/6717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11221
CVE ID: CVE-2003-1439 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11244 - http://www.securityfocus.com/archive/1/309941/30/26090/threaded - http://www.securityfocus.com/bid/6743 - http://www.securityfocus.com/archive/1/309775
CVE ID: CVE-2003-1440 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: SpamProbe 0.8a allows remote attackers to cause a denial of service (crash) via HTML e-mail with newline characters within an href tag, which is not properly handled by certain regular expressions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6739 - http://sourceforge.net/project/shownotes.php?release_id=137128 - http://secunia.com/advisories/7994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11247 - http://www.securitytracker.com/id?1006038
CVE ID: CVE-2003-1441 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Posadis 0.50.4 through 0.50.8 allows remote attackers to cause a denial of service (crash) via a DNS message without a question section, which triggers null dereference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11285 - http://secunia.com/advisories/8018 - http://www.securityfocus.com/bid/6799 - http://www.osvdb.org/3522 - http://www.posadis.org/advisories/pos_adv_003.txt
CVE ID: CVE-2003-1442 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11290 - http://marc.info/?l=bugtraq&m=104619331706574&w=2 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0127.html - http://www.securityfocus.com/bid/6824
CVE ID: CVE-2003-1443 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kaspersky Antivirus (KAV) 4.0.9.0 does not detect viruses in files with MS-DOS device names in their filenames, which allows local users to bypass virus protection, as demonstrated using aux.vbs and aux.com. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11292 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0130.html
CVE ID: CVE-2003-1444 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kaspersky Antivirus (KAV) 4.0.9.0 allows local users to cause a denial of service (CPU consumption or crash) and prevent malicious code from being detected via a file with a long pathname. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-02/0130.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11291
CVE ID: CVE-2003-1445 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Far Manager 1.70beta1 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long pathname. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11293 - http://securityreason.com/securityalert/3281 - http://www.securityfocus.com/bid/6822 - http://www.securityfocus.com/archive/1/311334
CVE ID: CVE-2003-1446 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the save_into_file function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a ~ (tilde). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6912 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0260.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11382
CVE ID: CVE-2003-1447 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt passwords when the configuration file is exported to XML. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11245 - http://www.securityfocus.com/archive/1/310796 - http://www.securityfocus.com/bid/6758 - http://www.securityfocus.com/archive/1/310118 - http://securityreason.com/securityalert/3277
CVE ID: CVE-2003-1448 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the Windows 2000 kernel allows remote attackers to cause a denial of service (SMB request hang) via a NetBIOS continuation packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11274 - http://www.immunitysec.com/downloads/advantages_of_block_based_analysis.html - http://www.securityfocus.com/bid/6766
CVE ID: CVE-2003-1449 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aladdin Knowlege Systems eSafe Gateway 3.5.126.0 does not check the entire stream of Content Vectoring Protocol (CVP) data, which allows remote attackers to bypass virus protection. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-02/0088.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11295 - http://www.securityfocus.com/bid/6787
CVE ID: CVE-2003-1450 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service (segmentation fault) via a malformed RPL_NAMREPLY numeric 353 message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/312133 - http://www.securityfocus.com/bid/6880 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-February/003850.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11363 - http://securityreason.com/securityalert/3279 - http://www.linuxsecurity.co
e.xforce.ibmcloud.com/vulnerabilities/11363 - http://securityreason.com/securityalert/3279 - http://www.linuxsecurity.com/content/view/104622/104/
CVE ID: CVE-2003-1451 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Symantec Norton AntiVirus 2002 allows remote attackers to execute arbitrary code via an e-mail attachment with a compressed ZIP file that contains a file with a long filename. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11365 - http://www.securityfocus.com/bid/6886 - http://www.lac.co.jp/security/english/snsadv_e/61_e.html - http://securityresponse.symantec.com/avcenter/security/Content/2003.02.28.html - http://www.derkeiler.com/Mailin
.html - http://securityresponse.symantec.com/avcenter/security/Content/2003.02.28.html - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-02/0233.html
CVE ID: CVE-2003-1452 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd program. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3268 - http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0047.html - http://www.securityfocus.com/archive/1/319811 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11877 - http://www.securityfocus.com/bid/7447
CVE ID: CVE-2003-1453 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MytextSanitizer function in XOOPS 1.3.5 through 1.3.9 and XOOPS 2.0 through 2.0.1 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in an IMG tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/319715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11872 - http://www.securityfocus.com/bid/7434 - http://securityreason.com/securityalert/3269
CVE ID: CVE-2003-1454 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie in plaintext, which could allow remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11871 - http://www.securityfocus.com/bid/7440 - http://www.securityfocus.com/archive/1/319747 - http://securityreason.com/securityalert/3276
CVE ID: CVE-2003-1455 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the launch_bcrelay function in pptpctrl.c in PoPToP 1.1.4-b1 through PoPToP 1.1.4-b3 allow local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7582 - http://sourceforge.net/project/shownotes.php?release_id=138437 - http://www.securityfocus.com/bid/7590 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12101
CVE ID: CVE-2003-1456 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://perl.bobbitt.ca/yabbse/index.php?board=2%3Baction=display%3Bthreadid=720 - http://securityreason.com/securityalert/3270 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11878 - http://www.securityfocus.com/archive/1/319763 - http://www.securityfocus.com/bid/7444
CVE ID: CVE-2003-1457 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Auerswald COMsuite CTI ControlCenter 3.1 creates a default "runasositron" user account with an easily guessable password, which allows local users or remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7458 - http://www.securityfocus.com/archive/1/319946 - http://securityreason.com/securityalert/3282 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11923
CVE ID: CVE-2003-1458 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to execute arbitrary SQL commands via the member name. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/12273 - http://securityreason.com/securityalert/3278 - http://www.securityfocus.com/bid/7543 - http://www.securityfocus.com/archive/1/321000
CVE ID: CVE-2003-1459 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote attackers to execute arbitrary PHP code via the (1) template parameter in News.php or (2) installdir parameter in install.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/12271 - http://www.securityfocus.com/bid/7542 - http://securityreason.com/securityalert/3278 - http://www.securityfocus.com/archive/1/321000
CVE ID: CVE-2003-1460 State: PUBLISHED Published: 2007-10-23T01:00:00Z Last Updated: 2024-09-17T02:41:24.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Worker Filemanager 1.0 through 2.7 sets the permissions on the destination directory to world-readable and executable while copying data, which could allow local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.boomerangsworld.de/worker/wchanges.php3?lang=en - http://www.securityfocus.com/bid/7460
CVE ID: CVE-2003-1461 State: PUBLISHED Published: 2007-10-23T01:00:00 Last Updated: 2024-08-08T02:28:03.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: the vendor was unable to reproduce the problem on a system that had been patched for an lp vulnerability (CVE-2002-1473). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7489 - http://www.securityfocus.com/archive/1/320371 - http://www.securityfocus.com/archive/1/320323 - http://securityreason.com/securityalert/3283 - https://oval.cisecurity.org/repository/searc
focus.com/archive/1/320323 - http://securityreason.com/securityalert/3283 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4897 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11919