Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-2431 State: PUBLISHED Published: 2009-02-06T19:00:00Z Last Updated: 2024-09-17T02:42:04.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via unknown "malicious code," related to incorrect use of the socketInputBuffered function by sockGen.c. Additional Analyst Notes: - CVE Program Container: References: - http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-sockgen-c
CVE ID: CVE-2002-2432 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-16T18:04:18.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via a crafted username. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE ID: CVE-2002-2433 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-16T21:04:32.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cause a denial of service (abend) via a crafted ABOR command. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE ID: CVE-2002-2434 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-16T20:27:54.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: NWFTPD.nlm before 5.02i in the FTP server in Novell NetWare does not properly listen for data connections, which allows remote attackers to cause a denial of service (abend) via multiple FTP sessions. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE ID: CVE-2002-2435 State: PUBLISHED Published: 2011-12-07T19:00:00 Last Updated: 2024-08-08T04:06:54.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264. Additional Analyst Notes: - CVE Program Container: References: - http://w2spconf.com/2010/papers/p26.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/71817 - http://bugzilla.mozilla.org/show_bug.cgi?id=147777
CVE ID: CVE-2002-2436 State: PUBLISHED Published: 2011-12-07T19:00:00 Last Updated: 2024-08-08T04:06:54.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cascading Style Sheets (CSS) implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mozilla.com/security/2010/03/31/plugging-the-css-history-leak/ - http://w2spconf.com/2010/papers/p26.pdf - http://bugzilla.moz
a.com/security/2010/03/31/plugging-the-css-history-leak/ - http://w2spconf.com/2010/papers/p26.pdf - http://bugzilla.mozilla.org/show_bug.cgi?id=147777 - https://developer.mozilla.org/en/CSS/Privacy_and_the_:visited_selector - https://exchange.xforce.ibmcloud.com/vulnerabilities/71816
CVE ID: CVE-2002-2437 State: PUBLISHED Published: 2011-12-07T19:00:00Z Last Updated: 2024-09-17T03:53:56.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mozilla.com/security/2010/03/31/plugging-the-css-history-leak/ - http://w2spconf.com/2010/papers/p26.pdf - http://bugzilla.m
lla.com/security/2010/03/31/plugging-the-css-history-leak/ - http://w2spconf.com/2010/papers/p26.pdf - http://bugzilla.mozilla.org/show_bug.cgi?id=147777 - https://developer.mozilla.org/en/CSS/Privacy_and_the_:visited_selector
CVE ID: CVE-2002-2438 State: PUBLISHED Published: 2021-05-18T11:36:47 Last Updated: 2024-08-08T04:06:55.369Z Vendors: n/a Products: kernel Problem Types: CWE-287 Description: TCP firewalls could be circumvented by sending a SYN Packets with other flags (like e.g. RST flag) set, which was not correctly discarded by the Linux TCP stack after firewalling. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/05/30/8 - http://www.openwall.com/lists/oss-security/2012/05/30/4 - http://www.openwall.com/lists/oss-security/2012/05/30/12 - http://www.openwall.com/lists/oss-security/2012/05/30/11 - http://www.openwall.com/lists/oss-security/201
012/05/30/12 - http://www.openwall.com/lists/oss-security/2012/05/30/11 - http://www.openwall.com/lists/oss-security/2012/05/30/13 - http://www.openwall.com/lists/oss-security/2012/02/03/7 - http://www.openwall.com/lists/oss-security/2012/05/29/8 - http://www.openwall.com/lists/oss-security/2014/02/12/8 - http://www.openwall.com/lists/oss-security/2012/05/30/9 - http://www.openwall.com/lists/oss-security/2012/05/31/3 - http://www.openwall.com/lists/oss-security/2012/05/30/2 - https://www.kb.cert.org/vuls/id/464113 - https://www.kb.cert.org/vuls/id/464113%2C - https://bugzilla.suse.com/show_bug.cgi?id=744994%2C - https://www.openwall.com/lists/oss-security/2012/02/03/7 - https://security.neta
la.suse.com/show_bug.cgi?id=744994%2C - https://www.openwall.com/lists/oss-security/2012/02/03/7 - https://security.netapp.com/advisory/ntap-20210727-0003/
CVE ID: CVE-2002-2439 State: PUBLISHED Published: 2019-10-23T17:47:38 Last Updated: 2024-08-08T04:06:54.588Z Vendors: GNU Products: gcc Problem Types: Integer Overflow Description: Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2002-2439 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2002-2439 - https://access.redhat.com/security/cve/cve-2002-2439 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=19351
CVE ID: CVE-2002-2440 State: REJECTED Published: 2020-11-05T19:49:17 Last Updated: 2020-11-05T19:49:17 Description: No description available.
CVE ID: CVE-2002-2441 State: REJECTED Published: 2020-11-05T19:49:42 Last Updated: 2020-11-05T19:49:42 Description: No description available.
CVE ID: CVE-2002-2442 State: REJECTED Published: 2020-11-05T19:50:09 Last Updated: 2020-11-05T19:50:09 Description: No description available.
CVE ID: CVE-2002-2443 State: PUBLISHED Published: 2013-05-29T10:00:00 Last Updated: 2024-08-08T04:06:54.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106698.html - http://lists.open
tainer: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106698.html - http://lists.opensuse.org/opensuse-updates/2013-07/msg00004.html - http://lists.opensuse.org/opensuse-updates/2013-07/msg00007.html - http://www.debian.org/security/2013/dsa-2701 - https://github.com/krb5/krb5/commit/cf1a0c411b2668c57c41e9c4efd15ba17b6b322c - http://krbdev.mit.edu/rt/Ticket/Display.html?id=7637 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105978.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105879.html - http://rhn.redhat.com/errata/RHSA-2013-0942.html - https://bugzilla.redhat.com/show_bug.cgi?id=962531 - http://www.ubunt
http://rhn.redhat.com/errata/RHSA-2013-0942.html - https://bugzilla.redhat.com/show_bug.cgi?id=962531 - http://www.ubuntu.com/usn/USN-2810-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:166
CVE ID: CVE-2002-2444 State: PUBLISHED Published: 2019-10-28T13:11:34 Last Updated: 2024-08-08T04:06:55.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Snoopy before 2.0.0 has a security hole in exec cURL Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/18/2 - https://security-tracker.debian.org/tracker/CVE-2002-2444 - https://sourceforge.net/p/snoopy/bugs/13/
CVE ID: CVE-2002-2445 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-08T04:06:55.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of (1) root.genie for the root user, (2) "service." for the service user, (3) admin.genie for the admin user, (4) reboot for the reboot user, and (5) shutdown for the shutdown user, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/2338955-100.pdf?REQ=RAA&DIRECTION=2338955-100&FILENAME=2338955-100.pdf&FILEREV=1&DOCREV_ORG=1 - http://apps.gehealth
let/2338955-100.pdf?REQ=RAA&DIRECTION=2338955-100&FILENAME=2338955-100.pdf&FILEREV=1&DOCREV_ORG=1 - http://apps.gehealthcare.com/servlet/ClientServlet/2354459-100.pdf?REQ=RAA&DIRECTION=2354459-100&FILENAME=2354459-100.pdf&FILEREV=4&DOCREV_ORG=4 - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277
CVE ID: CVE-2002-2446 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-08T04:06:55.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Healthcare Millennium MG, NC, and MyoSIGHT has a password of insite.genieacq for the insite account that cannot be changed without disabling product functionality for remote InSite support, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/2338955-100.pdf?REQ=RAA&DIRECTION=2338955-100&FILENAME=2338955-100.pdf&FILEREV=1&DOCREV_ORG=1 - http://apps.gehealthcare.com/servlet/ClientServlet/2354459-100.pdf?REQ=RAA&DIR
=2338955-100.pdf&FILEREV=1&DOCREV_ORG=1 - http://apps.gehealthcare.com/servlet/ClientServlet/2354459-100.pdf?REQ=RAA&DIRECTION=2354459-100&FILENAME=2354459-100.pdf&FILEREV=4&DOCREV_ORG=4 - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CVE ID: CVE-2003-0001 State: PUBLISHED Published: 2003-01-08T05:00:00 Last Updated: 2024-08-08T01:36:25.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/307564/30/26270/threaded - http://www.securitytracker.com/id/1031583 - http://www.osvdb.org/9962 - http://www.redhat.com/support/errata/RHSA-2003-088.html - http://www.oracle.com/tec
031583 - http://www.osvdb.org/9962 - http://www.redhat.com/support/errata/RHSA-2003-088.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://marc.info/?l=bugtraq&m=104222046632243&w=2 - http://www.kb.cert.org/vuls/id/412115 - http://www.securityfocus.com/archive/1/305335/30/26420/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2665 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0016.html - http://www.redhat.com/support/errata/RHSA-2003-025.html - http://secunia.com/advisories/7996 - http://www.atstake.com/research/advisories/2003/a010603-1.txt - http://www.securitytracker.com/id/1040185 - http:
7996 - http://www.atstake.com/research/advisories/2003/a010603-1.txt - http://www.securitytracker.com/id/1040185 - http://www.atstake.com/research/advisories/2003/atstake_etherleak_report.pdf
CVE ID: CVE-2003-0002 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:36:25.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary script via the REASONTXT parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5922 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-002 - http://marc.info/?l=bugtraq&m=103417794800719&w=2 - http://www.iss.net/security_center/static/10318.php
CVE ID: CVE-2003-0003 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:36:25.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-001 - http://marc.info/?l=bugtraq&m=104394414713415&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mit
p://marc.info/?l=bugtraq&m=104394414713415&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11132 - http://www.securityfocus.com/bid/6666 - http://www.kb.cert.org/vuls/id/610986 - http://www.cert.org/advisories/CA-2003-03.html - http://marc.info/?l=ntbugtraq&m=104393588232166&w=2
CVE ID: CVE-2003-0004 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:36:25.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Windows Redirector function in Microsoft Windows XP allows local users to execute arbitrary code via a long parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0154.html - http://www.securityfocus.com/bid/6778 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-005 - http://marc.info/?l=bugtraq&m=104878038418534&w=2 - http://www.iss.net/security_center/static/11260.php
CVE ID: CVE-2003-0007 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:36:25.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11133 - http://www.securityfo
tes/securitybulletins/2003/ms03-003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11133 - http://www.securityfocus.com/bid/6667
CVE ID: CVE-2003-0009 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:36:25.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary script in the Local Computer security context via an hcp:// URL with the malicious script in the topic parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/n-047.shtml - http://www.iss.net/security_center/static/11425.php - http://www.osvdb.org/6074 - http://marc.info/?l=bugtraq&m=104636383018686&w=2 - https://docs.microsoft.com/en-us
5.php - http://www.osvdb.org/6074 - http://marc.info/?l=bugtraq&m=104636383018686&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-006 - http://www.kb.cert.org/vuls/id/489721 - http://www.securityfocus.com/bid/6966
CVE ID: CVE-2003-0010 State: PUBLISHED Published: 2003-03-21T05:00:00 Last Updated: 2024-08-08T01:36:25.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based buffer overflow attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7146 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A795 - http://labs.i
om/bid/7146 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A795 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=26 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A794 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A200 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-008 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0139.html - http://marc.info/?l=bugtraq&m=104812108307645&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A134
CVE ID: CVE-2003-0011 State: PUBLISHED Published: 2003-03-21T05:00:00 Last Updated: 2024-08-08T01:36:25.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (blocked traffic to DNS servers) via a certain type of incoming DNS request that is not properly handled. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7145 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-009
CVE ID: CVE-2003-0012 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:36:25.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world-writable permissions for the data/mining directory when it runs, which allows local users to modify or delete the data. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-012.html - http://www.securityfocus.com/bid/6502 - http://marc.info/?l=bugtraq&m=104154319200399&w=2 - http://www.debian.org/security/2003/dsa-230 - http://www.iss.net/security_cen
rc.info/?l=bugtraq&m=104154319200399&w=2 - http://www.debian.org/security/2003/dsa-230 - http://www.iss.net/security_center/static/10971.php
CVE ID: CVE-2003-0013 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:36:25.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default .htaccess scripts for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 do not include filenames for backup copies of the localconfig file that are made from editors such as vi and Emacs, which could allow remote attackers to obtain a database password by directly accessing the backup file. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6351 - http://www.securityfocus.com/bid/6501 - http://www.iss.net/security_center/static/10970.php - http://marc.i
b.org/6351 - http://www.securityfocus.com/bid/6501 - http://www.iss.net/security_center/static/10970.php - http://marc.info/?l=bugtraq&m=104154319200399&w=2 - http://www.debian.org/security/2003/dsa-230
CVE ID: CVE-2003-0014 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T01:36:25.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: gsinterf.c in bmv 1.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18823 - http://www.debian.org/security/2005/dsa-633 - http://securityfocus.org/bid/12229 - http://secunia.com/advisories/13793 - http://packages.debian.org/changelogs/pool/main/b/bmv/bmv_1.2-14.2/changelog - http://securitytracker.com/id?1012847
CVE ID: CVE-2003-0015 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:36:25.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-012.html - http://ccvs.cvshome.org/servlets/NewsItemView?newsID=51&JServSessionIdservlets=5of2iuhr14 - http://marc.info/?l=bugtraq&m=104342550612736&w=2
rg/servlets/NewsItemView?newsID=51&JServSessionIdservlets=5of2iuhr14 - http://marc.info/?l=bugtraq&m=104342550612736&w=2 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:009 - http://marc.info/?l=bugtraq&m=104438807203491&w=2 - http://www.securityfocus.com/bid/6650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11108 - http://marc.info/?l=bugtraq&m=104333092200589&w=2 - http://rhn.redhat.com/errata/RHSA-2003-013.html - http://marc.info/?l=bugtraq&m=104428571204468&w=2 - http://www.debian.org/security/2003/dsa-233 - http://www.kb.cert.org/vuls/id/650937 - http://security.e-matters.de/advisories/012003.html - http://www.cert.org/advisories/CA-2003-02.html - http://www.
937 - http://security.e-matters.de/advisories/012003.html - http://www.cert.org/advisories/CA-2003-02.html - http://www.ciac.org/ciac/bulletins/n-032.shtml - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0028.html
CVE ID: CVE-2003-0016 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:36:25.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows remote attackers to cause a denial of service or execute arbitrary code via an HTTP request containing MS-DOS device names. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11125 - http://marc.info/?l=apache-httpd-announce&m=104313442901017&w=2 - http://www.kb.cert.org/vuls/id/979793 - http://www.kb.cert.org/vuls/id/825177 - http://www.securityfocus.com/bid/6659 - http