Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-0346 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:50:47.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with (1) large length for a Text or Copyright string, or (2) a large number of tracks, which leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A218 - http://www.kb.cert.org/vuls/id/561284 - http://www.cert.org/advisories/CA-2003-18.html
al%3Aorg.mitre.oval%3Adef%3A218 - http://www.kb.cert.org/vuls/id/561284 - http://www.cert.org/advisories/CA-2003-18.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1104 - http://www.kb.cert.org/vuls/id/265232 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1095 - http://marc.info/?l=bugtraq&m=105899759824008&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-030
CVE ID: CVE-2003-0347 State: PUBLISHED Published: 2003-09-04T04:00:00 Last Updated: 2024-08-08T01:50:47.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/804780 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0093.html - http://secunia.com/advisories/9666 - http://marc.info/?l=bugtraq&m=106262077829157&w=2 - http://www.securityfocus.com/bid/8534 - https://docs.micro
es/9666 - http://marc.info/?l=bugtraq&m=106262077829157&w=2 - http://www.securityfocus.com/bid/8534 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-037
CVE ID: CVE-2003-0348 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:50:47.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the local system via HTML script. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-021 - http://www.securityfocus.com/bid/8034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12440 - http://www.kb.cert.org/vuls/id/320516
CVE ID: CVE-2003-0349 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:50:47.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105665030925504&w=2 - http://secunia.com/advisories/9115 - http://www.kb.cert.org/vuls/id/113716 - https://oval.cisecurity.org/repository/search/def
/secunia.com/advisories/9115 - http://www.kb.cert.org/vuls/id/113716 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A938 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-022 - http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0306&L=NTBUGTRAQ&P=R4563 - http://securitytracker.com/id?1007059
CVE ID: CVE-2003-0350 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:50:47.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 (ListView) does not properly handle Windows messages, which allows local users to execute arbitrary code via a "Shatter" style message to the Utility Manager that references a user-controlled callback function. Additional Analyst Notes: - CVE Program Container: References: - http://www.ngssoftware.com/advisories/utilitymanager.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/12543 - https://oval.cisecurity.org/repositor
/utilitymanager.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/12543 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A451 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-025 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0015.html - http://marc.info/?l=bugtraq&m=105777681615939&w=2 - http://www.securityfocus.com/bid/8154
CVE ID: CVE-2003-0351 State: REJECTED Published: 2004-08-20T04:00:00 Last Updated: 2004-08-20T09:00:00 Description: No description available.
CVE ID: CVE-2003-0352 State: PUBLISHED Published: 2003-07-17T04:00:00 Last Updated: 2024-08-08T01:50:47.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/12629 - http://www.cert.org/advisories/CA-2003-16.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A296 - http://www.sec
03-16.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A296 - http://www.securityfocus.com/bid/8205 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007357.html - http://marc.info/?l=bugtraq&m=105914789527294&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007079.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A194 - http://www.kb.cert.org/vuls/id/568148 - http://marc.info/?l=bugtraq&m=105838687731618&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-026 - http://www.cert.org/advisories/CA-2003-19.html - http://www.xfocus.org/documents/20
es/securitybulletins/2003/ms03-026 - http://www.cert.org/advisories/CA-2003-19.html - http://www.xfocus.org/documents/200307/2.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2343
CVE ID: CVE-2003-0353 State: PUBLISHED Published: 2003-08-21T04:00:00 Last Updated: 2024-08-08T01:50:48.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106149556627778&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-033 - http://www.securityfocus.com/bid/8455 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
- http://www.securityfocus.com/bid/8455 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1039 - http://marc.info/?l=ntbugtraq&m=106251069107953&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6954 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A961 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A962
CVE ID: CVE-2003-0354 State: PUBLISHED Published: 2003-06-05T04:00:00 Last Updated: 2024-08-08T01:50:47.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-182.html - http://www.redhat.com/support/errata/RHSA-2003-181.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:065 - http://marc.info/?l=bugtraq&m=105465818929172&w=2 - https://oval
.mandriva.com/security/advisories?name=MDKSA-2003:065 - http://marc.info/?l=bugtraq&m=105465818929172&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A133
CVE ID: CVE-2003-0355 State: PUBLISHED Published: 2003-05-30T04:00:00Z Last Updated: 2024-09-17T03:43:38.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/320707
CVE ID: CVE-2003-0356 State: PUBLISHED Published: 2003-05-30T04:00:00 Last Updated: 2024-08-08T01:50:47.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync, (9) SMB, (10) SMPP, and (11) TSP dissectors, which do not properly use the tvb_get_nstringz and tvb_get_nstringz0 functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/641013 - http://www.redhat.com/support/errata/RHSA-2003
Program Container: References: - http://www.kb.cert.org/vuls/id/641013 - http://www.redhat.com/support/errata/RHSA-2003-077.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A69 - http://www.ethereal.com/appnotes/enpa-sa-00009.html - http://www.debian.org/security/2003/dsa-313 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:067
CVE ID: CVE-2003-0357 State: PUBLISHED Published: 2003-05-30T04:00:00 Last Updated: 2024-08-08T01:50:47.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) Mount and (2) PPP dissectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/232164 - http://www.securityfocus.com/bid/7494 - http://www.securityfocus.com/bid/7495 - http://rhn.redhat.com/errata/RHSA-2003-077.html - http://www.kb.cert.org/vuls/id/361700 - https://oval.cisecurity.org/repository/search/definiti
rata/RHSA-2003-077.html - http://www.kb.cert.org/vuls/id/361700 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A73 - http://www.ethereal.com/appnotes/enpa-sa-00009.html - http://www.debian.org/security/2003/dsa-313 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:067
CVE ID: CVE-2003-0358 State: PUBLISHED Published: 2003-05-30T04:00:00 Last Updated: 2024-08-08T01:50:47.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-350 - http://www.debian.org/security/2003/dsa-316 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11283 - http://www.securityfocus.com/bid/6806 - http://www.securityfocus.com/archive/1/311172/2003-02-08/2003-02-14/0 - http://nethack
/www.securityfocus.com/bid/6806 - http://www.securityfocus.com/archive/1/311172/2003-02-08/2003-02-14/0 - http://nethack.sourceforge.net/v340/bugmore/secpatch.txt
CVE ID: CVE-2003-0359 State: PUBLISHED Published: 2003-06-18T04:00:00Z Last Updated: 2024-09-16T22:09:41.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replacing the original binaries with malicious code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-316
CVE ID: CVE-2003-0360 State: PUBLISHED Published: 2003-05-30T04:00:00 Last Updated: 2024-08-08T01:50:47.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-307 - http://gps.seul.org/changelog.html
CVE ID: CVE-2003-0361 State: PUBLISHED Published: 2003-05-30T04:00:00 Last Updated: 2024-08-08T01:50:48.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-307 - http://gps.seul.org/changelog.html
CVE ID: CVE-2003-0362 State: PUBLISHED Published: 2003-05-30T04:00:00 Last Updated: 2024-08-08T01:50:48.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in gPS before 0.10.2 may allow local users to cause a denial of service (SIGSEGV) in rgpsp via long command lines. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-307 - http://gps.seul.org/changelog.html
CVE ID: CVE-2003-0363 State: PUBLISHED Published: 2005-04-15T04:00:00 Last Updated: 2024-08-08T01:50:47.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in LICQ 1.2.6, 1.0.3 and possibly other versions allows remote attackers to perform unknown actions via format string specifiers. Additional Analyst Notes: - CVE Program Container: References: - http://csdl.computer.org/comp/proceedings/hicss/2004/2056/09/205690277.pdf
CVE ID: CVE-2003-0364 State: PUBLISHED Published: 2003-06-05T04:00:00 Last Updated: 2024-08-08T01:50:47.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-187.html - http://www.turbolinux.com/security/TLSA-2003-41.txt - http://www.redhat.com/support/errata/RHSA-2003-195.html - http://www.redhat.com/support/errata/RHSA-2003-198.html - http://www.debian.org/security/2
t/errata/RHSA-2003-195.html - http://www.redhat.com/support/errata/RHSA-2003-198.html - http://www.debian.org/security/2003/dsa-336 - http://www.debian.org/security/2003/dsa-311 - http://www.debian.org/security/2003/dsa-332 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A295 - http://www.debian.org/security/2003/dsa-312 - http://www.debian.org/security/2004/dsa-442
CVE ID: CVE-2003-0365 State: PUBLISHED Published: 2003-06-05T04:00:00 Last Updated: 2024-08-08T01:50:48.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: ICQLite 2003a creates the ICQ Lite directory with an ACE for "Full Control" privileges for Interactive Users, which allows local users to gain privileges as other users by replacing the executables with malicious programs. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105427404625027&w=2
CVE ID: CVE-2003-0366 State: PUBLISHED Published: 2003-06-18T04:00:00Z Last Updated: 2024-09-17T00:46:42.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: lyskom-server 2.0.7 and earlier allows unauthenticated users to cause a denial of service (CPU consumption) via a large query. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-318
CVE ID: CVE-2003-0367 State: PUBLISHED Published: 2003-06-10T04:00:00 Last Updated: 2024-08-08T01:50:47.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7872 - http://www.turbolinux.com/security/TLSA-2003-38.txt - http://www.debian.org/security/2003/dsa-308 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:068 - http://www.openpkg.org/security/OpenPKG-SA-2003.031-gzip.html
CVE ID: CVE-2003-0368 State: PUBLISHED Published: 2004-01-14T05:00:00 Last Updated: 2024-08-08T01:50:48.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nokia Gateway GPRS support node (GGSN) allows remote attackers to cause a denial of service (kernel panic) via a malformed IP packet with a 0xFF TCP option. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a060903-1.txt - http://www.securityfocus.com/bid/7854 - http://www.kb.cert.org/vuls/id/924812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12221
CVE ID: CVE-2003-0370 State: PUBLISHED Published: 2003-06-05T04:00:00 Last Updated: 2024-08-08T01:50:47.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-192.html - http://lists.grok.org.uk/pipermail/full-disclosure/2003-May/004983.html - http://www.turbolinux.com/security/TLSA-2003-36.txt - http://www.redhat.com/support/errata/RHSA-2003-193.html - http://www.securityf
urbolinux.com/security/TLSA-2003-36.txt - http://www.redhat.com/support/errata/RHSA-2003-193.html - http://www.securityfocus.com/archive/1/320707 - http://www.debian.org/security/2003/dsa-361 - http://www.kde.org/info/security/advisory-20030602-1.txt - http://www.securityfocus.com/bid/7520
CVE ID: CVE-2003-0371 State: PUBLISHED Published: 2003-06-06T04:00:00 Last Updated: 2024-08-08T01:50:48.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Prishtina FTP client 1.x allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP banner. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105370592729044&w=2
CVE ID: CVE-2003-0372 State: PUBLISHED Published: 2003-06-06T04:00:00 Last Updated: 2024-08-08T01:50:48.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code by causing a negative argument to be provided to the insstr function as used in a NASL script. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105364059803427&w=2 - http://marc.info/?l=bugtraq&m=105369506714849&w=2 - http://www.securityfocus.com/bid/7664
CVE ID: CVE-2003-0373 State: PUBLISHED Published: 2003-06-06T04:00:00 Last Updated: 2024-08-08T01:50:47.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code via (1) a long proto argument to the scanner_add_port function, (2) a long user argument to the ftp_log_in function, (3) a long pass argument to the ftp_log_in function. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105364059803427&w=2 - http://marc.info/?l=bugtraq&m=105369506714849&w=2 - http://w
nces: - http://marc.info/?l=bugtraq&m=105364059803427&w=2 - http://marc.info/?l=bugtraq&m=105369506714849&w=2 - http://www.securityfocus.com/bid/7664
CVE ID: CVE-2003-0374 State: PUBLISHED Published: 2003-06-06T04:00:00 Last Updated: 2024-08-08T01:50:47.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, a different set of vulnerabilities than those identified by CVE-2003-0372 and CVE-2003-0373, aka "similar issues in other nasl functions as well as in libnessus." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105364059803427&w=2 - http://www.securityfocus.com/bid/7664
CVE ID: CVE-2003-0375 State: PUBLISHED Published: 2003-06-06T04:00:00 Last Updated: 2024-08-08T01:50:47.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in member.php of XMBforum XMB 1.8.x (aka Partagium) allows remote attackers to insert arbitrary HTML and web script via the "member" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://forums.xmbforum.com/viewthread.php?tid=773046 - http://www.securityfocus.com/bid/7662 - http://marc.info/?l=bugtraq&m=105363936402228&w=2 - https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE ID: CVE-2003-0376 State: PUBLISHED Published: 2003-06-06T04:00:00 Last Updated: 2024-08-08T01:50:47.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Eudora 5.2.1 allows remote attackers to cause a denial of service (crash and failed restart) and possibly execute arbitrary code via an Attachment Converted argument with a large number of . (dot) characters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105370625529452&w=2
CVE ID: CVE-2003-0377 State: PUBLISHED Published: 2003-06-06T04:00:00 Last Updated: 2024-08-08T01:50:47.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versions, allows remote attackers to insert arbitrary SQL and execute code via certain variables, as demonstrated using the GroupName variable in SiteAdmin.ASP. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105370528728225&w=2
CVE ID: CVE-2003-0378 State: PUBLISHED Published: 2003-06-06T04:00:00 Last Updated: 2024-08-08T01:50:48.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/467828 - http://docs.info.apple.com/article.html?artnum=107579
CVE ID: CVE-2003-0379 State: PUBLISHED Published: 2003-06-18T04:00:00 Last Updated: 2024-08-08T01:50:47.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Apple File Service (AFP Server) for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows remote attackers to overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/mhonarc/security-announce/msg00030.html