Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-1116 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-08T02:12:36.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing requests to the TNS Listener. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105012832418415&w=2 - http://www.securityfocus.com/bid/7325 - http://otn.oracle.com/deploy/security/pdf/2
o/?l=bugtraq&m=105012832418415&w=2 - http://www.securityfocus.com/bid/7325 - http://otn.oracle.com/deploy/security/pdf/2003alert53.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/11768 - http://www.integrigy.com/alerts/FNDFS_Vulnerability.htm - http://www.kb.cert.org/vuls/id/168873 - http://securitytracker.com/id?1006550
CVE ID: CVE-2003-1117 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-08T02:12:35.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RealSystem Server 6.x, 7.x and 8.x, and RealSystem Proxy 8.x, related to URL error handling, allows remote attackers to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1003604 - http://service.real.com/help/faq/security/bufferoverflow.html - http://www.kb.cert.org/vuls/id/912219 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11362 - http://www.kb.cert.org/vuls/id/143627
CVE ID: CVE-2003-1118 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-08T02:12:36.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service (client crash) and execute arbitrary code via a spoofed server response containing a long string followed by a \n (newline) character. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2003-April/004383.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11731 - http://www.securityfocus.com/bid/7292 - http://www.kb.cert.org/vuls/id/146785
CVE ID: CVE-2003-1119 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-08T02:12:36.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH Secure Shell before 3.2.9 allows remote attackers to cause a denial of service via malformed BER/DER packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/333980 - http://www.ssh.com/company/newsroom/article/476/
CVE ID: CVE-2003-1120 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-08T02:12:36.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the server's private key. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/displayvuln.php?osvdb_id=4491 - http://www.ssh.com/company/newsroom/article/520/ - http://securitytracker.com/alerts/2004/Mar/1009532.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15585 - http://www.securityfocus.com/bid/9956 - http://secunia.com/advi
s://exchange.xforce.ibmcloud.com/vulnerabilities/15585 - http://www.securityfocus.com/bid/9956 - http://secunia.com/advisories/11193 - http://www.kb.cert.org/vuls/id/814198
CVE ID: CVE-2003-1121 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-08T02:12:36.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, which allows remote attackers to (1) modify arbitrary registry entries via the ScriptLogic RPC service (SLRPC) or (2) modify arbitrary configuration via the RunAdmin services (SLRAserver.exe and SLRAclient.exe). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11921 - http://www.kb.cert.org/vuls/id/231705 - http://www.securityfocus.com/bid/7477
force.ibmcloud.com/vulnerabilities/11921 - http://www.kb.cert.org/vuls/id/231705 - http://www.securityfocus.com/bid/7477 - http://www.securityfocus.com/bid/7475 - http://www.kb.cert.org/vuls/id/CRDY-5EXQRP - https://exchange.xforce.ibmcloud.com/vulnerabilities/11920 - http://www.kb.cert.org/vuls/id/609137 - http://www.kb.cert.org/vuls/id/CRDY-5EXQSV
CVE ID: CVE-2003-1122 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-08T02:12:36.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: ScriptLogic 4.01, and possibly other versions before 4.14, uses insecure permissions for the LOGS$ share, which allows users to modify log records and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/CRDY-5EXQT9 - http://www.kb.cert.org/vuls/id/813737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11922 - http://www.securityfocus.com/bid/7476
CVE ID: CVE-2003-1123 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-08T02:19:44.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-55100-1 - http://www.kb.cert.org/vuls/id/393292 - http://www.securityfocus.com/bid/7824 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12189 - http://secunia.com/advisories/8958 - h
focus.com/bid/7824 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12189 - http://secunia.com/advisories/8958 - http://securitytracker.com/id?1006935
CVE ID: CVE-2003-1124 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-08T02:19:44.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Sun Management Center (SunMC) 2.1.1, 3.0, and 3.0 Revenue Release (RR), when installed and run by root, allows local users to create or modify arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/9073 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-55141-1 - http://www.securityfocus.com/bid/7960 - http://www.kb.cert.org/vuls/id/758932 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12343
CVE ID: CVE-2003-1125 State: PUBLISHED Published: 2005-03-12T05:00:00Z Last Updated: 2024-09-17T04:24:21.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in ns-ldapd for Sun ONE Directory Server 4.16, 5.0, and 5.1 allows LDAP clients to cause a denial of service (service halt). Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-52102-1 - http://www.kb.cert.org/vuls/id/195644
CVE ID: CVE-2003-1126 State: PUBLISHED Published: 2005-03-12T05:00:00Z Last Updated: 2024-09-17T04:08:41.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/9541 - http://www.kb.cert.org/vuls/id/636964 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-56180-1
CVE ID: CVE-2003-1127 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-08T02:19:44.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Whale Communications e-Gap 2.5 on Windows 2000 allows remote attackers to obtain the source code for the login page via the HTTP TRACE method, which bypasses the preprocessor. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/371470 - http://www.procheckup.com/security_info/vuln_pr0307.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/14869 - http://www.securityfocus.com/bid/9431
CVE ID: CVE-2003-1128 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-08T02:19:44.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: XMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7, 2003, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to TCP port 8086. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/8775 - http://www.kb.cert.org/vuls/id/583020 - http://www.x2studios.com/index.php?page=kb&id=16 - http://www.securityfocus.com/bid/7534 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12139
CVE ID: CVE-2003-1129 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-08T02:19:44.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a URL with a long hostname to Yahoo! Messenger or Yahoo! Chat. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12130 - http://www.kb.cert.org/vuls/id/272644 - http://help.yahoo.com/help/us/mesg/use/use-45.html - http://secunia.com/
12130 - http://www.kb.cert.org/vuls/id/272644 - http://help.yahoo.com/help/us/mesg/use/use-45.html - http://secunia.com/advisories/8924 - http://www.securityfocus.com/archive/1/323439
CVE ID: CVE-2003-1130 State: REJECTED Published: 2005-03-12T05:00:00 Last Updated: 2005-04-05T09:00:00 Description: No description available.
CVE ID: CVE-2003-1131 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-08T02:19:44.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote attackers to execute arbitrary PHP code by modifying the page parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10504 - http://marc.info/?l=bugtraq&m=111066494323543&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14078 - http://www.securityfocus.com/archive/1/348359 - http://www.s
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/14078 - http://www.securityfocus.com/archive/1/348359 - http://www.securityfocus.com/bid/9292 - http://www.osvdb.org/3228
CVE ID: CVE-2003-1132 State: PUBLISHED Published: 2005-04-21T04:00:00Z Last Updated: 2024-09-16T16:18:43.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS server for Cisco Content Service Switch (CSS) 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 (NXDOMAIN or "Name Error") instead of response code 0 ("No Error"), which allows remote attackers to cause a denial of service (inaccessible domain) by forcing other DNS servers to send and cache a request for a AAAA record to the vulnerable server. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20030430-dns.shtml - htt
yst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20030430-dns.shtml - http://www.kb.cert.org/vuls/id/714121
CVE ID: CVE-2003-1133 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:44.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rit Research Labs The Bat! 1.0.11 through 2.0 creates new accounts with insecure ACLs, which allows local users to read other users' email messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8891 - http://www.securityfocus.com/archive/1/342485 - http://securitytracker.com/id?1008004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13527
CVE ID: CVE-2003-1134 State: PUBLISHED Published: 2005-05-10T04:00:00Z Last Updated: 2024-09-17T02:36:05.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash), possibly by calling the ClassDepth function with a null parameter, which causes a crash instead of generating a null pointer exception. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8892 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012773.html
CVE ID: CVE-2003-1135 State: PUBLISHED Published: 2005-05-10T04:00:00Z Last Updated: 2024-09-16T16:38:22.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Yahoo! Messenger 5.6 allows remote attackers to cause a denial of service (crash) via a file send request (sendfile) with a large number of "%" (percent) characters after the Yahoo ID. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/342472 - http://www.securityfocus.com/bid/8894
CVE ID: CVE-2003-1136 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Chi Kien Uong Guestbook 1.51 allows remote attackers to inject arbitrary web script or HTML via (1) HTML in a posted message or (2) Javascript in an onmouseover attribute in an e-mail address or URL. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1008006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13523 - http://www.osvdb.org/2718 - http://www.securityfocus.com/bid/
tps://exchange.xforce.ibmcloud.com/vulnerabilities/13523 - http://www.osvdb.org/2718 - http://www.securityfocus.com/bid/8896 - http://www.securityfocus.com/archive/1/342475 - http://secunia.com/advisories/10080 - http://www.securityfocus.com/bid/8895
CVE ID: CVE-2003-1137 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that contains an asterisk (*) wildcard character. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/342766 - http://www.securityfocus.com/bid/8897 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13519 - http://www.securityfocus.com/archive/1/342473
CVE ID: CVE-2003-1138 State: PUBLISHED Published: 2005-05-10T04:00:00Z Last Updated: 2024-09-16T20:59:00.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash (//). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8898 - http://www.securityfocus.com/archive/1/342578
CVE ID: CVE-2003-1139 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10104 - http://securitytracker.com/id?1008014 - http://www.securityfocus.com/bid/8899 - http://www.securityfocus.com/archive/1/342476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13520 - http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0021.html
CVE ID: CVE-2003-1140 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Musicqueue 1.2.0 allows local users to execute arbitrary code via a long language variable in the configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10104 - http://securitytracker.com/id?1008014 - http://www.securityfocus.com/bid/8903 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13521 - http://www.securityfocus.com/archive/1/342476 - http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0021.html
CVE ID: CVE-2003-1141 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in NIPrint 4.10 allows remote attackers to execute arbitrary code via a long string to TCP port 515. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13591 - http://www.securityfocus.com/archive/1/343257 - http://www.osvdb.org/2774 - http://www.securityfocus.com/archive/1/343318 - http://www.securityfocus.com/bid/8968 - http://secunia.com/advisories/10143
CVE ID: CVE-2003-1142 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Help in NIPrint LPD-LPR Print Server 4.10 and earlier executes Windows Explorer with SYSTEM privileges, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/343258 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13592 - http://www.securityfocus.com/bid/8969
CVE ID: CVE-2003-1143 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Croteam Serious Sam demo test 2 2.1a, Serious Sam: the First Encounter 1.05, and Serious Sam: the Second Encounter 1.05 allow remote attackers to cause a denial of service (crash or freeze) via a TCP packet with an invalid first parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8936 - http://www.securityfocus.com/archive/1/342957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13618 - http://aluigi.altervista.org/adv/ssboom-adv.txt
CVE ID: CVE-2003-1144 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10136 - http://securitytracker.com/id?1008093 - http://www.osvdb.org/2766 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013231.html - http://www.securityfocus.com/archive/1/343322 - http://www.securityfocus.com/bid/8971 - https://exchange.
/013231.html - http://www.securityfocus.com/archive/1/343322 - http://www.securityfocus.com/bid/8971 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13599
CVE ID: CVE-2003-1145 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in friendmail.php in OpenAutoClassifieds 1.0 allows remote attackers to inject arbitrary web script or HTML via the listing parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/2767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13604 - http://www.securityfocus.com/bid/8972 - http://secunia.com/advisories/10138 - http://www.securityfocus.com/archive/1/343806
CVE ID: CVE-2003-1146 State: PUBLISHED Published: 2005-05-10T04:00:00Z Last Updated: 2024-09-16T17:17:58.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8977 - http://security.nnov.ru/docs5347.html
CVE ID: CVE-2003-1147 State: REJECTED Published: 2005-05-10T04:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2003-1148 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allow remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter to (1) config.inc.php or (2) new-visitor.inc.php in common/visiteurs/include/. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3586 - http://archives.neohapsis.com/archives/bugtraq/2003-10/0262.html - http://securitytracker.c
http://www.osvdb.org/3586 - http://archives.neohapsis.com/archives/bugtraq/2003-10/0262.html - http://securitytracker.com/id?1008011 - http://www.osvdb.org/2717 - http://www.securityfocus.com/bid/8902 - http://securitytracker.com/id?1017065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13529 - http://secunia.com/advisories/10079
CVE ID: CVE-2003-1149 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked site, which is displayed on the blocked sites error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/342548 - http://securityresponse.symantec.com/avcenter/security/Content/2003.10.27.html - http://www.osvdb.org/2714 - http://secunia.com/advisories/10067 - http://www.securityfocus.com/bid/890
2003.10.27.html - http://www.osvdb.org/2714 - http://secunia.com/advisories/10067 - http://www.securityfocus.com/bid/8904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13528
CVE ID: CVE-2003-1150 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the portmapper service (PMAP.NLM) in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8907 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10088194.htm - http://secunia.com/advisories/10100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13564
CVE ID: CVE-2003-1151 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Fastream NETFile Server 6.0.3.588 allows remote attackers to inject arbitrary web script or HTML via the URL, which is displayed on a "404 Not Found" error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/2732 - http://www.securityfocus.com/bid/8908 - http://securitytracker.com/id?1008020 - http://www.securityfocus.com/archive/1/342678 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13535 - http://secunia.com/advisories/10099