Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-0825 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:05:12.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15037 - http://www.ciac.org/ciac/bulletins/o-077.shtml - http://www.osvdb.org/3903 - https://oval.cisecurity.org/repository/search/definition/oval%3
ciac/bulletins/o-077.shtml - http://www.osvdb.org/3903 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A801 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A800 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A704 - http://www.securityfocus.com/bid/9624 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-006 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A802 - http://www.kb.cert.org/vuls/id/445214
CVE ID: CVE-2003-0826 State: PUBLISHED Published: 2003-09-23T04:00:00 Last Updated: 2024-08-08T02:05:12.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010496.html - http://lists.lysator.liu.se/pipermail/lsh-bugs/2003q3/000120.html - http://bugs.debian.org/211662 - http://www.debian.
- http://lists.lysator.liu.se/pipermail/lsh-bugs/2003q3/000120.html - http://bugs.debian.org/211662 - http://www.debian.org/security/2005/dsa-717 - http://marc.info/?l=bugtraq&m=106407188509874&w=2 - http://marc.info/?l=bugtraq&m=106398939512178&w=2
CVE ID: CVE-2003-0827 State: PUBLISHED Published: 2003-09-23T04:00:00 Last Updated: 2024-08-08T02:05:12.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service (crash) via a long packet to UDP port 523. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106399616919636&w=2 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY47686&apar=only
CVE ID: CVE-2003-0828 State: PUBLISHED Published: 2004-03-10T05:00:00 Last Updated: 2024-08-08T02:05:12.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain "games" group privileges when processing environment variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13301 - http://www.securityfocus.com/bid/8716
CVE ID: CVE-2003-0830 State: PUBLISHED Published: 2003-10-01T04:00:00Z Last Updated: 2024-09-16T20:22:20.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in marbles 1.0.2 and earlier allows local users to gain privileges via a long HOME environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-390
CVE ID: CVE-2003-0831 State: PUBLISHED Published: 2003-09-25T04:00:00 Last Updated: 2024-08-08T02:05:12.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106606885611269&w=2 - http://xforce.iss.net/xforce/alerts/id/154 - http://www.kb.cert.org/vuls/id/405348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12200 - https://www.exploit-db.com/exploits/107/ - http://lis
348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12200 - https://www.exploit-db.com/exploits/107/ - http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012072.html - http://secunia.com/advisories/9829 - http://marc.info/?l=bugtraq&m=106441655617816&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:095
CVE ID: CVE-2003-0832 State: PUBLISHED Published: 2003-10-01T04:00:00Z Last Updated: 2024-09-17T02:42:42.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a Hostname header. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-392
CVE ID: CVE-2003-0833 State: PUBLISHED Published: 2003-10-01T04:00:00Z Last Updated: 2024-09-17T03:59:00.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by creating directories that result in a long pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-392
CVE ID: CVE-2003-0834 State: PUBLISHED Published: 2003-11-06T05:00:00 Last Updated: 2024-08-08T02:05:12.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5141 - http://archives.neohapsis.com/archives/hp/2003-q4/0047.html - http://www.securityfocus.com/bid/8973 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57414 - ftp:
0047.html - http://www.securityfocus.com/bid/8973 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57414 - ftp://patches.sgi.com/support/free/security/advisories/20040801-01-P - http://www.idefense.com/application/poi/display?id=134&type=vulnerabilities&flashstatus=false - http://www.kb.cert.org/vuls/id/575804
CVE ID: CVE-2003-0835 State: PUBLISHED Published: 2003-10-01T04:00:00 Last Updated: 2024-08-08T02:05:12.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to execute arbitrary code via an ASX header with a long hostname. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106460912721618&w=2 - http://www.mplayerhq.hu/homepage/design6/news.html - http://marc.info/?l=bugtraq&m=106485005213109&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000760 - http://marc.info/?l=bugtraq&m=106454257221455&w=2
CVE ID: CVE-2003-0836 State: PUBLISHED Published: 2003-10-08T04:00:00 Last Updated: 2024-08-08T02:05:12.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with "Connect" privileges to execute arbitrary code via a LOAD command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2003-0836
CVE ID: CVE-2003-0837 State: PUBLISHED Published: 2003-10-08T04:00:00 Last Updated: 2024-08-08T02:05:12.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a, allows attackers with "Connect" privileges to execute arbitrary code via the INVOKE command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8743 - http://marc.info/?l=bugtraq&m=106503709914622&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13331
CVE ID: CVE-2003-0838 State: PUBLISHED Published: 2003-10-07T04:00:00 Last Updated: 2024-08-08T02:05:12.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but later executes as an HTA application, a different vulnerability than CVE-2003-0532, and as exploited using the QHosts Trojan horse (aka Trojan.Qhosts, QHosts-1, VBS.QHOSTS, or aolfix.exe). Additional Analyst Notes: - CVE Program Container: References:
aka Trojan.Qhosts, QHosts-1, VBS.QHOSTS, or aolfix.exe). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13314 - http://marc.info/?l=bugtraq&m=106304733121753&w=2 - http://www.osvdb.org/7872 - http://marc.info/?l=ntbugtraq&m=106302799428500&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009639.html - http://marc.info/?l=bugtraq&m=106304876523459&w=2 - http://www.securityfocus.com/bid/8556 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-040 - http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0310&L=ntbugtraq&F=P&S=&P=2169 - https://oval.cisecurity.org/repository
www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0310&L=ntbugtraq&F=P&S=&P=2169 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A204 - http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.html
CVE ID: CVE-2003-0839 State: PUBLISHED Published: 2003-10-09T04:00:00 Last Updated: 2024-08-08T02:05:12.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a "shell:" link. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106563075612028&w=2 - http://www.geocities.co.jp/SiliconValley/1667/advisory08e.html
CVE ID: CVE-2003-0840 State: PUBLISHED Published: 2003-10-09T04:00:00 Last Updated: 2024-08-08T02:05:12.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in dtprintinfo on HP-UX 11.00, and possibly other operating systems, allows local users to gain root privileges via a long DISPLAY environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106563181313571&w=2
CVE ID: CVE-2003-0841 State: PUBLISHED Published: 2003-10-09T04:00:00 Last Updated: 2024-08-08T02:05:12.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: The grid option in PeopleSoft 8.42 stores temporary .xls files in guessable directories under the web document root, which allows remote attackers to steal search results by directly accessing the files via a URL request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106554919000847&w=2
CVE ID: CVE-2003-0842 State: PUBLISHED Published: 2003-10-09T04:00:00 Last Updated: 2024-08-08T02:05:12.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode, allows remote attackers to execute arbitrary code via a long filename in a GET request with an "Accept-Encoding: gzip" header. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105457180009860&w=2
CVE ID: CVE-2003-0843 State: PUBLISHED Published: 2003-10-09T04:00:00 Last Updated: 2024-08-08T02:05:12.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode and using the Apache log, allows remote attackers to execute arbitrary code via format string characters in an HTTP GET request with an "Accept-Encoding: gzip" header. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105457180009860&w=2
CVE ID: CVE-2003-0844 State: PUBLISHED Published: 2003-10-09T04:00:00 Last Updated: 2024-08-08T02:05:12.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode without the Apache log, allows local users to overwrite arbitrary files via (1) a symlink attack on predictable temporary filenames on Unix systems, or (2) an NTFS hard link on Windows systems when the "Strengthen default permissions of internal system objects" policy is not enabled. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105457180009860&w=2
CVE ID: CVE-2003-0845 State: PUBLISHED Published: 2003-10-09T04:00:00 Last Updated: 2024-08-08T02:05:12.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct unauthorized activities and possibly execute arbitrary code via certain SQL statements to (1) TCP port 1701 in JBoss 3.2.1, and (2) port 1476 in JBoss 3.0.8. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8773 - http://marc.info/?l=bugtraq&m=106546044416498&w=2 - http://secunia.com/advisories/27914 - http:
rityfocus.com/bid/8773 - http://marc.info/?l=bugtraq&m=106546044416498&w=2 - http://secunia.com/advisories/27914 - http://sourceforge.net/docman/display_doc.php?docid=19314&group_id=22866 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11300 - http://marc.info/?l=bugtraq&m=106547728803252&w=2 - http://www.redhat.com/support/errata/RHSA-2007-1048.html
CVE ID: CVE-2003-0846 State: PUBLISHED Published: 2003-10-09T04:00:00 Last Updated: 2024-08-08T02:05:12.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuSEconfig.javarunt in the javarunt package on SuSE Linux 7.3Pro allows local users to overwrite arbitrary files via a symlink attack on the .java_wrapper temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106546531922379&w=2 - http://marc.info/?l=bugtraq&m=106546177518140&w=2
CVE ID: CVE-2003-0847 State: PUBLISHED Published: 2003-10-09T04:00:00 Last Updated: 2024-08-08T02:05:12.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuSEconfig.susewm in the susewm package on SuSE Linux 8.2Pro allows local users to overwrite arbitrary files via a symlink attack on the susewm.$$ temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106546531922379&w=2 - http://marc.info/?l=bugtraq&m=106545972615578&w=2
CVE ID: CVE-2003-0848 State: PUBLISHED Published: 2003-10-09T04:00:00 Last Updated: 2024-08-08T02:05:12.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2004-001.0/CSSA-2004-001.0.txt - ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc - http://rhn.redhat.com/errata/RHSA-2004-040.html - ftp://patches.sgi.com/support/free/secur
dvisories/20040202-01-U.asc - http://rhn.redhat.com/errata/RHSA-2004-040.html - ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc - http://www.redhat.com/support/errata/RHSA-2004-041.html - http://www.ebitech.sk/patrik/SA/SA-20031006-A.txt - http://secunia.com/advisories/10720 - http://secunia.com/advisories/10686 - http://secunia.com/advisories/10722 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:004 - http://secunia.com/advisories/10702 - http://www.ebitech.sk/patrik/SA/SA-20031006.txt - http://www.debian.org/security/2004/dsa-428 - http://marc.info/?l=bugtraq&m=106589631819348&w=2 - http://secunia.com/advisories/10683 - http://secunia.com/advisories/9
ttp://marc.info/?l=bugtraq&m=106589631819348&w=2 - http://secunia.com/advisories/10683 - http://secunia.com/advisories/9962/ - http://www.redhat.com/archives/fedora-announce-list/2004-January/msg00009.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11033 - http://secunia.com/advisories/10670 - http://marc.info/?l=bugtraq&m=106546447321274&w=2 - http://secunia.com/advisories/10698 - http://www.trustix.org/errata/misc/2004/TSL-2004-0005-slocate.asc.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A821
CVE ID: CVE-2003-0849 State: PUBLISHED Published: 2003-10-09T04:00:00 Last Updated: 2024-08-08T02:05:12.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106451047819552&w=2 - http://marc.info/?l=bugtraq&m=106485375218280&w=2 - http://marc.info/?l=bugtraq&m=106546086216984&w=2
CVE ID: CVE-2003-0850 State: PUBLISHED Published: 2003-10-25T04:00:00 Last Updated: 2024-08-08T02:05:12.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10543 - http://sourceforge.net/project/shownotes.php?release_id=191323 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000773 - http://marc.info/?l=bugtraq&m=106728224210446&w=2 - http://www.debian.org/security/2004/dsa-410
CVE ID: CVE-2003-0851 State: PUBLISHED Published: 2003-11-06T05:00:00 Last Updated: 2024-08-08T02:05:12.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5528 - http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00087.html - ftp://patches.sgi.com/support/free/security/advisories/20040304-01-U.asc - http://secunia.com/advisories/17381 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/
dvisories/20040304-01-U.asc - http://secunia.com/advisories/17381 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-003.txt.asc - http://www.cisco.com/warp/public/707/cisco-sa-20030930-ssl.shtml - http://www.securityfocus.com/bid/8970 - http://marc.info/?l=bugtraq&m=106796246511667&w=2 - http://rhn.redhat.com/errata/RHSA-2004-119.html - http://www.openssl.org/news/secadv_20031104.txt - http://www.kb.cert.org/vuls/id/412478 - http://marc.info/?l=bugtraq&m=108403850228012&w=2
CVE ID: CVE-2003-0852 State: PUBLISHED Published: 2003-10-25T04:00:00 Last Updated: 2024-08-08T02:05:12.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in send_message.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP servers to cause a denial of service (crash) in sylpheed via format strings in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://sylpheed.good-day.net/#changes - http://www.securityfocus.com/bid/8877 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012542.html - http://www.guninski.com/sylph.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/13508
CVE ID: CVE-2003-0853 State: PUBLISHED Published: 2003-10-25T04:00:00 Last Updated: 2024-08-08T02:05:12.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000771 - http://support.avaya.com/elmodocs2/security/ASA-2005-213.pdf - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000768 - http://lists.grok.org.uk/
security/ASA-2005-213.pdf - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000768 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012548.html - http://www.redhat.com/support/errata/RHSA-2003-309.html - http://www.turbolinux.com/security/TLSA-2003-60.txt - http://www.redhat.com/support/errata/RHSA-2003-310.html - http://www.securityfocus.com/bid/8875 - http://www.securityfocus.com/advisories/6014 - http://secunia.com/advisories/17069 - http://www.guninski.com/binls.html - http://secunia.com/advisories/10126 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:106
CVE ID: CVE-2003-0854 State: PUBLISHED Published: 2003-10-25T04:00:00 Last Updated: 2024-08-08T02:05:12.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-705 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000771 - http://support.avaya.com/elmodocs2/security/ASA-2005-213.pdf - https://www.exploit-db.com/exploits/115 - http://distro.conectiva.com.br/atualizacoes/?id=a&a
ecurity/ASA-2005-213.pdf - https://www.exploit-db.com/exploits/115 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000768 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012548.html - http://www.redhat.com/support/errata/RHSA-2003-309.html - http://www.turbolinux.com/security/TLSA-2003-60.txt - http://www.redhat.com/support/errata/RHSA-2003-310.html - http://www.securityfocus.com/advisories/6014 - http://secunia.com/advisories/17069 - http://www.guninski.com/binls.html - http://secunia.com/advisories/10126 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:106
CVE ID: CVE-2003-0855 State: PUBLISHED Published: 2003-10-30T05:00:00 Last Updated: 2024-08-08T02:05:12.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pan 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news post with a long author email address. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc - http://www.redhat.com/support/errata/RHSA-2003-312.html - http://www.redhat.com/support/errata/RHSA-2003-311.html - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=107519 - http://bugzilla.gnome.org/show_bug.cgi?id=107025