Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-1352 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:02.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gabber 0.8.7 sends an email to a specific address during user login and logout, which allows remote attackers to obtain user session activity and Gabber version number by sniffing. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6624 - http://archives.neohapsis.com/archives/bugtraq/2003-01/0179.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11115
CVE ID: CVE-2003-1353 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:02.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Outreach Project Tool (OPT) 0.946b allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the news field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11096 - http://archives.neohapsis.com/archives/bugtraq/2003-01/0119.html - http://www.securityfocus.com/bid/6631
CVE ID: CVE-2003-1354 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:03.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/securitynews/5EP0O0K8UO.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11084 - http://www.securityfocus.com/bid/6636 - http://seclists.org/lists/bugtraq/2003/Jan/0178.html
com/vulnerabilities/11084 - http://www.securityfocus.com/bid/6636 - http://seclists.org/lists/bugtraq/2003/Jan/0178.html - http://www.pivx.com/kristovich/adv/mk001/
CVE ID: CVE-2003-1355 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:02.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the remote console (rcon) in Battlefield 1942 1.2 and 1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long user name and password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6967 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0342.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11426
CVE ID: CVE-2003-1356 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:01.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "file handling" in sort in HP-UX 10.01 through 10.20, and 11.00 through 11.11 is "incorrect," which allows attackers to gain access or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11107 - http://www.securityfocus.com/bid/6640 - http://archives.neohapsis.com/archives/hp/2003-q1/0009.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5758 - http://archives.neohapsi
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5758 - http://archives.neohapsis.com/archives/hp/2003-q1/0009.html
CVE ID: CVE-2003-1357 State: PUBLISHED Published: 2007-10-14T19:00:00 Last Updated: 2024-08-08T02:28:02.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProxyView has a default administrator password of Administrator for Embedded Windows NT, which allows remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11185 - http://securityreason.com/securityalert/3228 - http://www.securityfocus.com/bid/6708 - http://www.securityfocus.com/archive/1/308733
CVE ID: CVE-2003-1358 State: PUBLISHED Published: 2007-10-17T01:00:00 Last Updated: 2024-08-08T02:28:03.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/advisories/4960 - http://www.securityfocus.com/archive/1/324381 - http://securityreason.com/securityalert/3236 - http://www.securityfocus.com/bid/6837 - https://exchange.xforce.ibmcloud.
http://securityreason.com/securityalert/3236 - http://www.securityfocus.com/bid/6837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11312
CVE ID: CVE-2003-1359 State: PUBLISHED Published: 2007-10-17T01:00:00 Last Updated: 2024-08-08T02:28:03.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain privileges via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/324381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11313 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5587 - http://www.securityfocus.com/advisories/4959 - http://securityreason.com/securityalert/3236 - http://www.securityfocus.com/bid/6
ww.securityfocus.com/advisories/4959 - http://securityreason.com/securityalert/3236 - http://www.securityfocus.com/bid/6836
CVE ID: CVE-2003-1360 State: PUBLISHED Published: 2007-10-17T01:00:00 Last Updated: 2024-08-08T02:28:01.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the setupterm function of (1) lanadmin and (2) landiag programs of HP-UX 10.0 through 10.34 allows local users to execute arbitrary code via a long TERM environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11314 - http://www.securityfocus.com/archive/1/324381 - http://www.securityfocus.com/advisories/4957 - http://securityreason.com/securityalert/3236
CVE ID: CVE-2003-1361 State: PUBLISHED Published: 2007-10-17T01:00:00 Last Updated: 2024-08-08T02:28:02.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in VERITAS Bare Metal Restore (BMR) of Tivoli Storage Manager (TSM) 3.1.0 through 3.2.1 allows remote attackers to gain root privileges on the BMR Main Server. Additional Analyst Notes: - CVE Program Container: References: - http://seer.support.veritas.com/docs/252933.htm - http://archives.neohapsis.com/archives/bugtraq/2003-02/0333.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11418 - http://www.securityfocus.com/bid/6928 - http://seer.support.veritas.com/docs/254442.htm
CVE ID: CVE-2003-1362 State: PUBLISHED Published: 2007-10-17T01:00:00 Last Updated: 2024-08-08T02:28:02.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bastille B.02.00.00 of HP-UX 11.00 and 11.11 does not properly configure the (1) NOVRFY and (2) NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of system users and expand defined sendmail aliases. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/hp/2003-q1/0033.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11366 - http://www.securityfocus.com/bid/6878
CVE ID: CVE-2003-1363 State: PUBLISHED Published: 2007-10-17T01:00:00Z Last Updated: 2024-09-17T03:18:25.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port (9999), which allows remote attackers to mount brute force attacks on the administration console without detection. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/11310.php - http://archives.neohapsis.com/archives/bugtraq/2003-02/0149.html - http://www.securityfocus.com/bid/6842
CVE ID: CVE-2003-1364 State: PUBLISHED Published: 2007-10-17T01:00:00 Last Updated: 2024-08-08T02:28:02.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service (crash) via an HTTP GET message with empty (1) Connection or (2) Range fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7287 - http://archives.neohapsis.com/archives/bugtraq/2003-04/0095.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11718
CVE ID: CVE-2003-1365 State: PUBLISHED Published: 2007-10-17T01:00:00 Last Updated: 2024-08-08T02:28:02.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: The escape_dangerous_chars function in CGI::Lite 2.0 and earlier does not correctly remove special characters including (1) "\" (backslash), (2) "?", (3) "~" (tilde), (4) "^" (carat), (5) newline, or (6) carriage return, which could allow remote attackers to read or write arbitrary files, or execute arbitrary commands, in shell scripts that rely on CGI::Lite to filter such dangerous inputs. Additional Analyst Notes: - CVE Program Container: References: - http://use.perl.org/~cbrooks/journal/10542 - http://www.securityfocus.com
Notes: - CVE Program Container: References: - http://use.perl.org/~cbrooks/journal/10542 - http://www.securityfocus.com/archive/1/311414 - http://www.securityfocus.com/bid/6833 - http://securityreason.com/securityalert/3237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11308 - http://search.cpan.org/~smylers/CGI-Lite-2.02/Lite.pm - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0065.html
CVE ID: CVE-2003-1366 State: PUBLISHED Published: 2007-10-17T01:00:00 Last Updated: 2024-08-08T02:28:02.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: chpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a hard link attack on a temporary file used to store user database information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1006035 - http://www.securityfocus.com/archive/1/309962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11233 - http://securityreason.com/securityalert/3238 - http://www.securityfocus.com/bid/6748 - http://www.epita.fr/~bevand_m/asa/asa-0001
CVE ID: CVE-2003-1367 State: PUBLISHED Published: 2007-10-17T01:00:00 Last Updated: 2024-08-08T02:28:02.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3235 - http://www.securityfocus.com/archive/1/310113 - http://www.securityfocus.com/bid/6761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11243
CVE ID: CVE-2003-1368 State: PUBLISHED Published: 2007-10-17T01:00:00 Last Updated: 2024-08-08T02:28:02.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the 32bit FTP client 9.49.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP server banner. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11234 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0054.html - http://www.securityfocus.com/bid/6764
CVE ID: CVE-2003-1369 State: PUBLISHED Published: 2007-10-17T01:00:00 Last Updated: 2024-08-08T02:28:03.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ByteCatcher FTP client 1.04b allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP server banner. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6762 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11235 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0054.html
CVE ID: CVE-2003-1370 State: PUBLISHED Published: 2007-10-17T01:00:00 Last Updated: 2024-08-08T02:28:03.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Nuked-Klan 1.2b allow remote attackers to inject arbitrary HTML or web script via (1) the Author field in the Guestbook module, (2) the Titre or Pseudo fields in the Forum module, or (3) "La Tribune Libre" in the Shoutbox module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6699 - http://www.securityfocus.com/bid/6697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11176 - http://archives.neohapsis.com/archives/bu
us.com/bid/6697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11176 - http://archives.neohapsis.com/archives/bugtraq/2003-01/0330.html - http://www.securityfocus.com/bid/6700
CVE ID: CVE-2003-1371 State: PUBLISHED Published: 2007-10-17T01:00:00 Last Updated: 2024-08-08T02:28:02.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the (1) Team, (2) News, or (3) Liens modules. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11424 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html - http://www.securityfocus.com/bid/6917
CVE ID: CVE-2003-1372 State: PUBLISHED Published: 2007-10-17T01:00:00 Last Updated: 2024-08-08T02:28:02.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in links.php script in myPHPNuke 1.8.8, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the (1) ratenum or (2) query parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11376 - http://secunia.com/advisories/8125 - http://www.securityfocus.com/bid/6892 - http://www.osvdb.org/3931 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0231.html
CVE ID: CVE-2003-1373 State: PUBLISHED Published: 2007-10-17T01:00:00 Last Updated: 2024-08-08T02:28:03.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via .. (dot dot) sequences followed by NULL (%00) characters in CGI parameters, as demonstrated using the lang parameter in prefs.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6889 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0245.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11407
CVE ID: CVE-2003-1374 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:02.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in disable of HP-UX 11.0 may allow local users to execute arbitrary code via a long argument to the (1) -r or (2)-c options. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-02/0156.html - http://www.securityfocus.com/bid/6845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11316
CVE ID: CVE-2003-1375 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in wall for HP-UX 10.20 through 11.11 may allow local users to execute arbitrary code by calling wall with a large file as an argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/advisories/5369 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5439 - http://www.securityfocus.com/bid/6800 - http://securityreason.com/securityalert/3264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11272 - http://www.securityfocus.c
yreason.com/securityalert/3264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11272 - http://www.securityfocus.com/archive/1/310908
CVE ID: CVE-2003-1376 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:02.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows local users to brute force the encryption keys and extract the data from the zip file by guessing the state of the stream coder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/311059 - http://www.securityfocus.com/bid/6805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11296 - http://securityreason.com/securityalert/3265
CVE ID: CVE-2003-1377 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the reverse DNS lookup of Smart IRC Daemon (SIRCD) 0.4.0 and 0.4.4 allows remote attackers to execute arbitrary code via a client with a long hostname. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11409 - http://www.securityfocus.com/bid/6924 - http://www.securityfocus.com/archive/1/312924
CVE ID: CVE-2003-1378 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/312910 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11411 - http://www.securityfocus.com/bid/6923 - http://www.securityfocus.com/archive/1/312929
CVE ID: CVE-2003-1379 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:02.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: clarkconnectd in ClarkConnect Linux 1.2 allows remote attackers to obtain sensitive information about the server via the characters (1) A, which reveals the date and time, (2) F, (3) M, which reveals 'ifconfig' information, (4) P, which lists the processes, (5) Y, which reveals the snort log files, or (6) b, which reveals /var/log/messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11419 - http://www.securityfocus.com/archive/1/313080 - http://www.secu
s://exchange.xforce.ibmcloud.com/vulnerabilities/11419 - http://www.securityfocus.com/archive/1/313080 - http://www.securityfocus.com/bid/6934
CVE ID: CVE-2003-1380 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:02.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in BisonFTP Server 4 release 2 allows remote attackers to (1) list directories above the root via an 'ls @../' command, or (2) list files above the root via a "mget @../FILE" command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/312032 - http://www.securityfocus.com/bid/6873 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11347
CVE ID: CVE-2003-1381 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life Server, allows remote attackers to execute arbitrary commands via format string specifiers in the amx_say command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11427 - http://securityreason.com/securityalert/3258 - http://www.securityfocus.com/archive/1/313273
CVE ID: CVE-2003-1382 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ISMail 1.4.3 and earlier allow remote attackers to execute arbitrary code via long domain names in (1) MAIL FROM or (2) RCPT TO fields. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11432 - http://securityreason.com/securityalert/3254 - http://www.securityfocus.com/archive/1/313363 - http://www.securityfocus.com/bid/6972
CVE ID: CVE-2003-1383 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:02.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: WEB-ERP 0.1.4 and earlier allows remote attackers to obtain sensitive information via an HTTP request for the logicworks.ini file, which contains the MySQL database username and password. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11443 - http://securityreason.com/securityalert/3257 - http://www.securityfocus.com/archive/1/313575 - http://www.securityfocus.com/bid/6996
CVE ID: CVE-2003-1384 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in PY-Livredor 1.0 allows remote attackers to insert arbitrary web script or HTML via the (1) titre, (2) Votre pseudo, (3) Votre e-mail, or (4) Votre message fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6997 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004015.html - http://www.security-corp.org/advisories/SCSA-008.txt - http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00024.html - http://
security-corp.org/advisories/SCSA-008.txt - http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00024.html - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0102.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11448
CVE ID: CVE-2003-1385 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: ipchat.php in Invision Power Board 1.1.1 allows remote attackers to execute arbitrary PHP code, if register_globals is enabled, by modifying the root_path parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/8182 - http://www.osvdb.org/3357 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0099.html - http://www.securityfocus.com/bid/6976 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11435
CVE ID: CVE-2003-1386 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T02:28:03.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to /support/messages, which displays the server's /var/log/messages file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11440 - http://www.websec.org/adv/axis2400.txt.html - http://archives.neohapsis.com/archives/bugtraq/2003-03/0370.html - http://www.securityfocus.com/bid/6980 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0377.ht
03-03/0370.html - http://www.securityfocus.com/bid/6980 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0377.html