Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
aq&m=105013378320711&w=2 - http://www.idefense.com/advisory/04.08.03.txt - http://marc.info/?l=bugtraq&m=104982175321731&w=2 - http://secunia.com/advisories/34920 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A156 - http://secunia.com/advisories/8499 - http://marc.info/?l=bugtraq&m=105001663120995&w=2 - http://www.redhat.com/support/errata/RHSA-2003-139.html - http://lists.apple.com/mhonarc/security-announce/msg00028.html - http://marc.info/?l=bugtraq&m=104931360606484&w=2 - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=205147 - http://marc.info/?l=bugtraq&m=104994309010974&w=2 - http://www.kb.cert.org/vuls/id/206537 - https://li
ontentID=205147 - http://marc.info/?l=bugtraq&m=104994309010974&w=2 - http://www.kb.cert.org/vuls/id/206537 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4
%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r
254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2003-0133 State: PUBLISHED Published: 2003-04-15T04:00:00 Last Updated: 2024-08-08T01:43:35.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of service (crash) via certain malformed messages. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A138 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000737 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:046 - http://www.redhat.com/support/errata/RHSA-2003-126.html
CVE ID: CVE-2003-0134 State: PUBLISHED Published: 2003-04-03T05:00:00 Last Updated: 2024-08-08T01:43:35.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in filestat.c for Apache running on OS2, versions 2.0 through 2.0.45, allows unknown attackers to cause a denial of service via requests related to device names. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.apache.org/viewcvs/apr/file_io/os2/filestat.c.diff?r1=1.34&r2=1.35 - http://marc.info/?l=bugtraq&m=105418115512559&w=2 - http://marc.info/?l=bugtraq&m=104931360606484&w=2 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3C
04931360606484&w=2 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re028d61fe612b
c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E - h
/lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2003-0135 State: PUBLISHED Published: 2003-04-03T05:00:00 Last Updated: 2024-08-08T01:43:35.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: vsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers (tcp_wrappers) but is installed as a standalone service, which inadvertently prevents vsftpd from restricting access as intended. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7253 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A634 - http://www.redhat.com/support/errata/RHSA-2003-084.html
CVE ID: CVE-2003-0136 State: PUBLISHED Published: 2003-04-15T04:00:00 Last Updated: 2024-08-08T01:43:35.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=188366 - http://www.redhat.com/support/errata/RHSA-2003-142.html - http://www.debian.org/security/2003/dsa-285 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A423
CVE ID: CVE-2003-0137 State: PUBLISHED Published: 2003-03-14T05:00:00 Last Updated: 2024-08-08T01:43:35.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: SNMP daemon in the DX200 based network element for Nokia Serving GPRS support node (SGSN) allows remote attackers to read SNMP options via arbitrary community strings. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/8301 - http://www.atstake.com/research/advisories/2003/a031303-2.txt
CVE ID: CVE-2003-0138 State: PUBLISHED Published: 2003-03-21T05:00:00 Last Updated: 2024-08-08T01:43:36.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-269 - http://www.redhat.com/support/errata/RHSA-2003-052.html - http://www.securityfocus.com/archive/1/316960/30/25250/threaded - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-004-krb4.txt - https://oval.cisecurity.org/repository/search/defin
//web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-004-krb4.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A248 - http://www.redhat.com/support/errata/RHSA-2003-091.html - http://www.debian.org/security/2003/dsa-273 - http://www.redhat.com/support/errata/RHSA-2003-051.html - http://www.kb.cert.org/vuls/id/623217 - http://www.debian.org/security/2003/dsa-266 - http://marc.info/?l=bugtraq&m=104791775804776&w=2 - http://www.securityfocus.com/bid/7113
CVE ID: CVE-2003-0139 State: PUBLISHED Published: 2003-03-21T05:00:00 Last Updated: 2024-08-08T01:43:36.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing." Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-052.html - http://www.securityfocus.com/archive/1/316960/30/25250/threaded - http://www.kb.cert.org/vuls/id/442569 - http://web.mit.edu
://www.securityfocus.com/archive/1/316960/30/25250/threaded - http://www.kb.cert.org/vuls/id/442569 - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-004-krb4.txt - http://www.redhat.com/support/errata/RHSA-2003-091.html - http://www.debian.org/security/2003/dsa-273 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A250 - http://www.redhat.com/support/errata/RHSA-2003-051.html - http://marc.info/?l=bugtraq&m=104791775804776&w=2 - http://www.debian.org/security/2003/dsa-266 - http://www.securityfocus.com/archive/1/317130/30/25250/threaded
CVE ID: CVE-2003-0140 State: PUBLISHED Published: 2003-03-21T05:00:00 Last Updated: 2024-08-08T01:43:35.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a crafted folder. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000626 - http://www.redhat.com/support/errata/RHSA-2003-109.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11583 - h
http://www.redhat.com/support/errata/RHSA-2003-109.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11583 - http://marc.info/?l=bugtraq&m=105171507629573&w=2 - http://marc.info/?l=bugtraq&m=104817995421439&w=2 - http://marc.info/?l=bugtraq&m=104852190605988&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2 - http://marc.info/?l=bugtraq&m=104818814931378&w=2 - http://www.securityfocus.com/bid/7120 - http://www.gentoo.org/security/en/glsa/glsa-200303-19.xml - http://www.securityfocus.com/archive/1/315679 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A434 - http://www.coresecurity.com/common/showdo
isecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A434 - http://www.coresecurity.com/common/showdoc.php?idx=310&idxseccion=10 - http://www.debian.org/security/2003/dsa-268 - http://www.novell.com/linux/security/advisories/2003_020_mutt.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000630 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:041
CVE ID: CVE-2003-0141 State: PUBLISHED Published: 2003-03-29T05:00:00 Last Updated: 2024-08-08T01:43:35.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the length values 286-287, which are treated as a very large length. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0156.html - http://www.securityfocus.com/bid/7177 -
ferences: - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0156.html - http://www.securityfocus.com/bid/7177 - http://marc.info/?l=bugtraq&m=104887465427579&w=2 - http://www.coresecurity.com/common/showdoc.php?idx=311&idxseccion=10 - http://www.kb.cert.org/vuls/id/705761
CVE ID: CVE-2003-0142 State: PUBLISHED Published: 2003-07-17T04:00:00 Last Updated: 2024-08-08T01:43:35.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat Reader (acroread) 6, under certain circumstances when running with the "Certified plug-ins only" option disabled, loads plug-ins with signatures used for older versions of Acrobat, which can allow attackers to cause Acrobat to enter Certified mode and run untrusted plugins by modifying the CTIsCertifiedMode function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/328224 - http://www.kb.cert.org/vuls/id/689835
CVE ID: CVE-2003-0143 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:43:36.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104792541215354&w=2 - http://www.securityfocus.com/bid/7058 - http://www.novell.com/linux/security/advisories/2003_018_qpopper.html - http://marc.info/?l=bugtraq&m=104739841223916&w=2 -
://www.novell.com/linux/security/advisories/2003_018_qpopper.html - http://marc.info/?l=bugtraq&m=104739841223916&w=2 - http://marc.info/?l=bugtraq&m=104768137314397&w=2 - http://www.debian.org/security/2003/dsa-259 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11516 - http://marc.info/?l=bugtraq&m=104748775900481&w=2
CVE ID: CVE-2003-0144 State: PUBLISHED Published: 2003-03-14T05:00:00 Last Updated: 2024-08-08T01:43:36.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20030406-02-P - http://www.debian.org/security/2003/dsa-275 - http://www.securityfocus.com/bid/7025 - http://www.mandriva.com/security/advisories?
.debian.org/security/2003/dsa-275 - http://www.securityfocus.com/bid/7025 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:059 - http://secunia.com/advisories/8293 - http://www.novell.com/linux/security/advisories/2003_014_lprold.html - http://www.debian.org/security/2003/dsa-267 - http://marc.info/?l=bugtraq&m=104690434504429&w=2 - http://marc.info/?l=bugtraq&m=104714441925019&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11473 - ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/010_lprm.patch
CVE ID: CVE-2003-0145 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:43:36.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," allows remote attackers to cause a denial of service (infinite loop), a different vulnerability than CAN-2003-0093. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-151.html - http://www.tcpdump.org/tcpdump-changes.txt - http://www.debian.org/security/2003/dsa-261 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027 - http://www.red
.debian.org/security/2003/dsa-261 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027 - http://www.redhat.com/support/errata/RHSA-2003-214.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11857 - http://www.redhat.com/support/errata/RHSA-2003-032.html
CVE ID: CVE-2003-0146 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T01:43:36.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in NetPBM 9.20 and earlier, and possibly other versions, may allow remote attackers to cause a denial of service or execute arbitrary code via "maths overflow errors" such as (1) integer signedness errors or (2) integer overflows, which lead to buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-263 - http://www.securityfocus.com/bid/6979 - http://www.kb.cert.org/vuls/id/630433 - http://distro.conectiva.com.br/atualizacoes/?id=a&anu
curityfocus.com/bid/6979 - http://www.kb.cert.org/vuls/id/630433 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000656 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11463 - http://www.redhat.com/support/errata/RHSA-2003-060.html - http://marc.info/?l=bugtraq&m=104644687816522&w=2
CVE ID: CVE-2003-0147 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T01:43:35.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal). Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-288 - http://www.redhat.com/support/errata/RHSA-2003-101.html - http://www.redhat.com/support/errata/R
security/2003/dsa-288 - http://www.redhat.com/support/errata/RHSA-2003-101.html - http://www.redhat.com/support/errata/RHSA-2003-102.html - http://www.openssl.org/news/secadv_20030317.txt - http://marc.info/?l=bugtraq&m=104829040921835&w=2 - http://www.securityfocus.com/archive/1/316165/30/25370/threaded - http://www.securityfocus.com/archive/1/316165/30/25370/threaded - http://marc.info/?l=bugtraq&m=104792570615648&w=2 - ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-014.0.txt - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:035 - http://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf - http://www.gentoo.org/security/en/glsa/glsa-200303-23.xml - https://oval.ci
o.stanford.edu/~dabo/papers/ssl-timing.pdf - http://www.gentoo.org/security/en/glsa/glsa-200303-23.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A466 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.019.html - http://marc.info/?l=bugtraq&m=104861762028637&w=2 - http://www.securityfocus.com/archive/1/316577/30/25310/threaded - http://www.securityfocus.com/archive/1/316577/30/25310/threaded - ftp://patches.sgi.com/support/free/security/advisories/20030501-01-I - http://marc.info/?l=bugtraq&m=104766550528628&w=2 - http://marc.info/?l=bugtraq&m=104819602408063&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000625 - http:/
//marc.info/?l=bugtraq&m=104819602408063&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000625 - http://www.kb.cert.org/vuls/id/997481 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0130.html
CVE ID: CVE-2003-0148 State: PUBLISHED Published: 2003-08-01T04:00:00 Last Updated: 2024-08-08T01:43:35.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that (1) obtain the database administrator username and encrypted password in a configuration file from the ePO server using a certain request, (2) crack the password due to weak cryptography, and (3) use the password to pass commands through xp_cmdshell. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a073103-1.txt - h
Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a073103-1.txt - http://www.nai.com/us/promos/mcafee/epo_vulnerabilities.asp
CVE ID: CVE-2003-0149 State: PUBLISHED Published: 2003-08-01T04:00:00 Last Updated: 2024-08-08T01:43:35.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a073103-1.txt - http://www.nai.com/us/promos/mcafee/epo_vulnerabilities.asp
CVE ID: CVE-2003-0150 State: PUBLISHED Published: 2003-03-21T05:00:00 Last Updated: 2024-08-08T01:43:36.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104800948128630&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A442 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio
pository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A442 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000743 - http://marc.info/?l=bugtraq&m=104802285012750&w=2 - http://www.debian.org/security/2003/dsa-303 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11510 - http://rhn.redhat.com/errata/RHSA-2003-094.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:057 - http://www.kb.cert.org/vuls/id/203897 - http://marc.info/?l=bugtraq&m=104739810523433&w=2 - http://www.linuxsecurity.com/advisories/engarde_advisory-3046.html - http://www.redhat.com/support/errata/RHSA-2003-093.html - http://www.securityfocus.com/bid/7052 - http://marc.info/?l=bugtraq&m=104715
hat.com/support/errata/RHSA-2003-093.html - http://www.securityfocus.com/bid/7052 - http://marc.info/?l=bugtraq&m=104715840202315&w=2
CVE ID: CVE-2003-0151 State: PUBLISHED Published: 2003-03-21T05:00:00 Last Updated: 2024-08-08T01:43:35.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that perform administrative functions, which allows remote attackers to read arbitrary files or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104792477914620&w=2 - http://www.securityfocus.com/bid/7124 - http://www.s21sec.com/en/avisos/s21sec-011-en.txt - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-28.jsp - http://marc.in
/avisos/s21sec-011-en.txt - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-28.jsp - http://marc.info/?l=bugtraq&m=104792544515384&w=2 - http://www.securityfocus.com/bid/7122
CVE ID: CVE-2003-0152 State: PUBLISHED Published: 2003-03-26T05:00:00 Last Updated: 2024-08-08T01:43:36.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-265 - http://www.securityfocus.com/bid/7162