Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-0975 State: PUBLISHED Published: 2003-12-10T05:00:00 Last Updated: 2024-08-08T02:12:35.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/mhonarc/security-announce/msg00042.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7973 - http://marc.info/?l=bugtraq&m=106917674428552&w=2 - http://docs.info.apple.com/article.html?artnum=61798
CVE ID: CVE-2003-0976 State: PUBLISHED Published: 2003-12-10T05:00:00 Last Updated: 2024-08-08T02:12:35.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: NFS Server (XNFS.NLM) for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could allow users to mount file systems when XNFS should deny the host. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10089375.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/13915
CVE ID: CVE-2003-0977 State: PUBLISHED Published: 2003-12-10T05:00:00 Last Updated: 2024-08-08T02:12:35.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A855 - ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc - http://marc.info/?l=bugtraq&m=107540163908129&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:112 - https://oval.c
info/?l=bugtraq&m=107540163908129&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:112 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A866 - http://www.debian.org/security/2004/dsa-422 - http://www.redhat.com/support/errata/RHSA-2004-003.html - http://secunia.com/advisories/10601 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11528 - http://marc.info/?l=bugtraq&m=107168035515554&w=2 - http://ccvs.cvshome.org/servlets/NewsItemView?newsID=84&JServSessionIdservlets=8u3x1myav1 - ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc - http://distro.conectiva.com.br/atualizacoes/?
ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000808 - http://www.redhat.com/support/errata/RHSA-2004-004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/13929
CVE ID: CVE-2003-0978 State: PUBLISHED Published: 2003-12-10T05:00:00 Last Updated: 2024-08-08T02:12:35.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious keyserver to cause a denial of service (crash) and possibly execute arbitrary code during key retrieval. Additional Analyst Notes: - CVE Program Container: References: - http://www.s-quadra.com/advisories/Adv-20031203.txt - http://www.novell.com/linux/security/advisories/2003_048_gpg.html - http://marc.info/?l=bugtraq&m=107047470625214&w=2 - https://
ww.novell.com/linux/security/advisories/2003_048_gpg.html - http://marc.info/?l=bugtraq&m=107047470625214&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13892
CVE ID: CVE-2003-0979 State: PUBLISHED Published: 2003-12-11T05:00:00 Last Updated: 2024-08-08T02:12:35.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which allows remote attackers to (1) use VisitorBook as an open mail relay, when $mailuser is 1, via extra headers in the email field, or (2) cause the guestbook database to be deleted via a large number of line breaks that exceeds the $max_posts variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.westpoint.ltd.uk/advisories/wp-03-0001.txt - http://marc.info/?l=bugtraq&m=107107840622493&w=2
CVE ID: CVE-2003-0980 State: PUBLISHED Published: 2003-12-11T05:00:00 Last Updated: 2024-08-08T02:12:35.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FreeScripts VisitorBook LE (visitorbook.pl) allows remote attackers to inject arbitrary HTML or web script via (1) the "do" parameter, (2) via the "user" parameter from a host with a malicious reverse DNS name, (3) via quote marks or ampersands in other parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.westpoint.ltd.uk/advisories/wp-03-0001.txt - http://marc.info/?l=bugtraq&m=107107840622493&w=2
CVE ID: CVE-2003-0981 State: PUBLISHED Published: 2003-12-11T05:00:00 Last Updated: 2024-08-08T02:12:35.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeScripts VisitorBook LE (visitorbook.pl) logs the reverse DNS name of a visiting host, which allows remote attackers to spoof the origin of their incoming requests and facilitate cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.westpoint.ltd.uk/advisories/wp-03-0001.txt - http://marc.info/?l=bugtraq&m=107107840622493&w=2
CVE ID: CVE-2003-0982 State: PUBLISHED Published: 2003-12-11T05:00:00 Last Updated: 2024-08-08T02:12:35.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11, and 5.x before 5.0.5, allows remote attackers to execute arbitrary code via a long password. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20031210-ACNS-auth.shtml - http://www.kb.cert.org/vuls/id/352462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13945 - http://secunia.com/advisories/10409 - http://www.securityfocus.com/bid/9187
CVE ID: CVE-2003-0983 State: PUBLISHED Published: 2003-12-11T05:00:00Z Last Updated: 2024-09-16T18:34:40.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, which allows local or remote attackers to conduct unauthorized activities via (1) a "bubba" local user account, (2) an open TCP port 34571, or (3) when a local DHCP server is unavailable, a DHCP server on the manufacturer's test network. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20031210-unity.shtml
CVE ID: CVE-2003-0984 State: PUBLISHED Published: 2003-12-23T05:00:00 Last Updated: 2024-08-08T02:12:35.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Real time clock (RTC) routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13943 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1013 - http://secunia.com/advisories/10533 - http://www.debian.org/security/2006/dsa-1082 - http://www.novell.com/linux/securi
http://secunia.com/advisories/10533 - http://www.debian.org/security/2006/dsa-1082 - http://www.novell.com/linux/security/advisories/2003_049_kernel.html - http://www.securitytracker.com/id?1008594 - http://www.redhat.com/support/errata/RHSA-2003-417.html - http://secunia.com/advisories/10537 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000799 - http://secunia.com/advisories/10583 - http://www.securityfocus.com/bid/9154 - http://www.redhat.com/archives/fedora-announce-list/2004-January/msg00000.html - http://secunia.com/advisories/10538 - http://www.debian.org/security/2006/dsa-1070 - http://secunia.com/advisories/20162 - http://marc.info/?l=bugtraq&m=107394143105081&w=2 - ht
rg/security/2006/dsa-1070 - http://secunia.com/advisories/20162 - http://marc.info/?l=bugtraq&m=107394143105081&w=2 - http://www.redhat.com/support/errata/RHSA-2004-188.html - http://www.debian.org/security/2006/dsa-1067 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A859 - http://www.debian.org/security/2006/dsa-1069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9406 - http://www.linuxsecurity.com/advisories/engarde_advisory-3904.html - http://secunia.com/advisories/20202 - http://secunia.com/advisories/10582 - http://secunia.com/advisories/10555 - http://secunia.com/advisories/10536 - http://www.osvdb.org/3
om/advisories/10582 - http://secunia.com/advisories/10555 - http://secunia.com/advisories/10536 - http://www.osvdb.org/3317 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:001 - http://secunia.com/advisories/20338
CVE ID: CVE-2003-0985 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:12:35.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://www.debian.org/security/2006/dsa-1082 - http://www.deb
ainer: References: - http://secunia.com/advisories/20163 - http://www.debian.org/security/2006/dsa-1082 - http://www.debian.org/security/2004/dsa-423 - http://www.redhat.com/support/errata/RHSA-2003-417.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000799 - http://www.debian.org/security/2004/dsa-450 - http://www.debian.org/security/2006/dsa-1070 - http://www.debian.org/security/2004/dsa-440 - http://marc.info/?l=bugtraq&m=107394143105081&w=2 - http://www.debian.org/security/2004/dsa-439 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2004/dsa-475 - http://www.debian.org/security/2006/dsa-1069 - http://www.linuxsecurity.com/advisories/engard
rg/security/2004/dsa-475 - http://www.debian.org/security/2006/dsa-1069 - http://www.linuxsecurity.com/advisories/engarde_advisory-3904.html - http://www.debian.org/security/2004/dsa-417 - http://www.debian.org/security/2004/dsa-442 - http://secunia.com/advisories/20202 - http://www.debian.org/security/2004/dsa-470 - http://secunia.com/advisories/20338 - http://download.immunix.org/ImmunixOS/7.3/updates/IMNX-2004-73-001-01 - http://www.redhat.com/support/errata/RHSA-2003-416.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/14135 - http://klecker.debian.org/~joey/security/kernel/patches/patch.CAN-2005-0528.mremap - http://www.debian.org/security/2004/dsa-413 - http://marc.info/?l=b
security/kernel/patches/patch.CAN-2005-0528.mremap - http://www.debian.org/security/2004/dsa-413 - http://marc.info/?l=bugtraq&m=107340358402129&w=2 - http://marc.info/?l=bugtraq&m=107350348418373&w=2 - http://marc.info/?l=bugtraq&m=107340814409017&w=2 - http://marc.info/?l=bugtraq&m=107332754521495&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A860 - http://archives.neohapsis.com/archives/bugtraq/2004-01/0070.html - http://www.osvdb.org/3315 - ftp://patches.sgi.com/support/free/security/advisories/20040102-01-U - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A867 - http://www.kernel.org/pub/linux/kernel/v2
isecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A867 - http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.24 - http://www.securityfocus.com/bid/9356 - http://svn.debian.org/wsvn/kernel/patch-tracking/CVE-2005-0528?op=file&rev=0&sc=0 - http://isec.pl/vulnerabilities/isec-0013-mremap.txt - http://marc.info/?l=bugtraq&m=107332782121916&w=2 - http://www.debian.org/security/2004/dsa-427 - http://www.redhat.com/support/errata/RHSA-2003-418.html - http://www.ciac.org/ciac/bulletins/o-045.shtml - http://www.redhat.com/support/errata/RHSA-2003-419.html - http://www.novell.com/linux/security/advisories/2004_03_linux_kernel.html - http://secunia.com/advisories/10532 - htt
- http://www.novell.com/linux/security/advisories/2004_03_linux_kernel.html - http://secunia.com/advisories/10532 - http://www.kb.cert.org/vuls/id/490620 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:001
CVE ID: CVE-2003-0986 State: PUBLISHED Published: 2006-02-27T23:00:00 Last Updated: 2024-08-08T02:12:35.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various routines for the ppc64 architecture on Linux kernel 2.6 prior to 2.6.2 and 2.4 prior to 2.4.24 do not use the copy_from_user function when copying data from userspace to kernelspace, which crosses security boundaries and allows local users to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-017.html - http://linux.bkbits.net:8080/linux-2.6/cset%403ffcf122S7e3xPZCpibrXq6KRRjwqw - http://linux.bkbits.net:8080/linux-2.4/cset%403fdd54
x.bkbits.net:8080/linux-2.6/cset%403ffcf122S7e3xPZCpibrXq6KRRjwqw - http://linux.bkbits.net:8080/linux-2.4/cset%403fdd54b3u9Eq0Wny2Nn1HGfI3pofOQ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9707
CVE ID: CVE-2003-0987 State: PUBLISHED Published: 2004-02-03T05:00:00 Last Updated: 2024-08-08T02:12:35.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1 - http://www.redhat.com/support/errata/RHSA-2005-816.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15041 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:046 - http://www.mail-archive.co
com/vulnerabilities/15041 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:046 - http://www.mail-archive.com/dev%40httpd.apache.org/msg19007.html - http://www.trustix.org/errata/2004/0027 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1 - http://marc.info/?l=bugtraq&m=108437852004207&w=2 - http://securitytracker.com/id?1008920 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.529643 - http://www.securityfocus.com/bid/9571 - http://www.mail-archive.com/dev%40httpd.apache.org/msg19014.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4416 - https://oval.cisecurity.org/repos
/oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4416 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100108 - http://www.redhat.com/support/errata/RHSA-2004-600.html - http://security.gentoo.org/glsa/glsa-200405-22.xml - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thr
ml/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.
apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2003-0988 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:12:35.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in KDE 3.1.0 through 3.1.4 allows attackers to execute arbitrary code via a VCF file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A865 - http://marc.info/?l=bugtraq&m=107412130407906&w=2 - http://security.gentoo.org/glsa/glsa-200404-02.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
urity.gentoo.org/glsa/glsa-200404-02.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14833 - http://www.redhat.com/support/errata/RHSA-2004-005.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000810 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:003 - http://www.kb.cert.org/vuls/id/820798 - http://www.kde.org/info/security/advisory-20040114-1.txt - http://www.redhat.com/support/errata/RHSA-2004-006.html - http://www.securityfocus.com/bid/9419
CVE ID: CVE-2003-0989 State: PUBLISHED Published: 2004-01-15T05:00:00 Last Updated: 2024-08-08T02:12:35.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc - http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00006.html - http://secunia.com/advisories/10718 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt - http://www.redhat.com/support/errata/RHS
/10718 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt - http://www.redhat.com/support/errata/RHSA-2004-008.html - http://www.redhat.com/archives/fedora-legacy-list/2004-January/msg00726.html - http://secunia.com/advisories/11032/ - http://secunia.com/advisories/10668 - ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt - http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00015.html - http://secunia.com/advisories/10637 - http://secunia.com/advisories/11022 - http://secunia.com/advisories/10636 - http://www.securityfocus.com/bid/9507 - http://marc.info/?l=bugtraq&m=107577418225627&w=2 - http://www.securitytracker.com/id?1008716 - http://lwn.net
id/9507 - http://marc.info/?l=bugtraq&m=107577418225627&w=2 - http://www.securitytracker.com/id?1008716 - http://lwn.net/Alerts/66805/ - http://secunia.com/advisories/12179/ - http://secunia.com/advisories/10644 - http://www.kb.cert.org/vuls/id/738518 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:008 - http://www.securityfocus.com/archive/1/350238/30/21640/threaded - http://www.redhat.com/support/errata/RHSA-2004-007.html - ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A847 - http://www.debian.org/security/2004/dsa-425 - http://secunia.com/advisories/10652 - http
%3Aorg.mitre.oval%3Adef%3A847 - http://www.debian.org/security/2004/dsa-425 - http://secunia.com/advisories/10652 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A852 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10599 - http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html - http://secunia.com/advisories/10639 - http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00009.html - http://lwn.net/Alerts/66445/
CVE ID: CVE-2003-0990 State: PUBLISHED Published: 2004-01-06T05:00:00 Last Updated: 2024-08-08T02:12:35.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the "To:" field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14079 - http://www.bugtraq.org/advisories/_BSSADV-0001.txt - http://marc.info/?l=bugtraq&m=107247236124180&w=2 - http://www.securityfocus.com/bid/9296 - http://www.securityfocus.com/archive/1/348366
CVE ID: CVE-2003-0991 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:12:35.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of service (crash) via malformed e-mail commands. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842 - http://www.debian.org/security/2004/dsa-436 - http://www.securityfocus.com/bid/9620 - http://www.redhat.com/support/errata/RHSA-2004-019.html - http://www.man
a-436 - http://www.securityfocus.com/bid/9620 - http://www.redhat.com/support/errata/RHSA-2004-019.html - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:013 - http://mail.python.org/pipermail/mailman-announce/2004-February/000067.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15106
CVE ID: CVE-2003-0992 State: PUBLISHED Published: 2004-01-15T05:00:00 Last Updated: 2024-08-08T02:12:35.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-020.html - http://mail.python.org/pipermail/mailman-announce/2003-September/000061.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:013 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A815 - http://distro.conectiva
3 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A815 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842
CVE ID: CVE-2003-0993 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:12:35.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.apacheweek.com/features/security-13 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1 - http://www.trustix.org/errata/2004/0027 - http: