Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-0594 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T01:58:11.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Mozilla to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/
grok.org.uk/pipermail/full-disclosure/2004-March/018475.html - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A917 - http://www.redhat.com/support/errata/RHSA-2004-112.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9826 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A873
CVE ID: CVE-2003-0595 State: PUBLISHED Published: 2003-07-25T04:00:00Z Last Updated: 2024-09-17T03:59:19.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in WiTango Application Server and Tango 2000 allows remote attackers to execute arbitrary code via a long cookie to Witango_UserReference. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0038.html
CVE ID: CVE-2003-0596 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:58:11.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdclone users by creating the directory ahead of time. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2003/dsa-352 - http://bugs.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=186219
CVE ID: CVE-2003-0597 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:58:11.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in display of Merge before 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105889063714201&w=2
CVE ID: CVE-2003-0598 State: REJECTED Published: 2003-08-14T04:00:00 Last Updated: 2004-08-20T09:00:00 Description: No description available.
CVE ID: CVE-2003-0599 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:58:10.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the Virtual File System (VFS) capability for phpGroupWare 0.9.16preRC and versions before 0.9.14.004 with unknown implications, related to the VFS path being under the web document root. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpgroupware.org - http://mail.gnu.org/archive/html/phpgroupware-users/2003-07/msg00035.html - http://www.debian.org/security/2003/dsa-365
CVE ID: CVE-2003-0601 State: PUBLISHED Published: 2004-03-10T05:00:00 Last Updated: 2024-08-08T01:58:11.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8266 - http://docs.info.apple.com/article.html?artnum=25631 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12728
CVE ID: CVE-2003-0602 State: PUBLISHED Published: 2003-07-29T04:00:00 Last Updated: 2024-08-08T01:58:11.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting vulnerabilities (XSS) in Bugzilla 2.16.x before 2.16.3 and 2.17.x before 2.17.4 allow remote attackers to insert arbitrary HTML or web script via (1) multiple default German and Russian HTML templates or (2) ALT and NAME attributes in AREA tags as used by the GraphViz graph generation feature for local dependency graphs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6861 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000653 - http://
es: - http://www.securityfocus.com/bid/6861 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000653 - http://www.securityfocus.com/bid/6868 - http://www.bugzilla.org/security/2.16.2/
CVE ID: CVE-2003-0603 State: PUBLISHED Published: 2003-07-29T04:00:00 Last Updated: 2024-08-08T01:58:11.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versions allows local users to overwrite arbitrary files via a symlink attack on temporary files that are created in directories with group-writable or world-writable permissions. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000653 - http://www.securityfocus.com/bid/7412 - http://www.bugzilla.org/security/2.16.2/
CVE ID: CVE-2003-0604 State: PUBLISHED Published: 2003-07-29T04:00:00 Last Updated: 2024-08-08T01:58:11.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File:// URL. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=ntbugtraq&m=105906261314411&w=2 - http://marc.info/?l=ntbugtraq&m=105899408520292&w=2 - http://marc.info/?l=bugtraq&m=105899261818572&w=2 - htt
4411&w=2 - http://marc.info/?l=ntbugtraq&m=105899408520292&w=2 - http://marc.info/?l=bugtraq&m=105899261818572&w=2 - http://www.pivx.com/larholm/unpatched/ - http://www.malware.com/once.again%21.html - http://marc.info/?l=bugtraq&m=105906867322856&w=2
CVE ID: CVE-2003-0605 State: PUBLISHED Published: 2003-07-29T04:00:00 Last Updated: 2024-08-08T01:58:11.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105880332428706&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006851.html - http://www.
l=bugtraq&m=105880332428706&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006851.html - http://www.cert.org/advisories/CA-2003-23.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A494 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1118 - http://www.cert.org/advisories/CA-2003-19.html - http://www.kb.cert.org/vuls/id/326746 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-039
CVE ID: CVE-2003-0606 State: PUBLISHED Published: 2003-08-01T04:00:00Z Last Updated: 2024-09-16T23:21:04.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-353
CVE ID: CVE-2003-0607 State: PUBLISHED Published: 2004-03-10T05:00:00 Last Updated: 2024-08-08T01:58:11.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in xconq 7.4.1 allows local users to become part of the "games" group via the (1) USER or (2) DISPLAY environment variables. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/12765 - http://www.debian.org/security/2003/dsa-354 - http://www.securityfocus.com/bid/8307
CVE ID: CVE-2003-0609 State: PUBLISHED Published: 2003-08-01T04:00:00 Last Updated: 2024-08-08T01:58:11.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long LD_PRELOAD environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105951760418667&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12755 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3601 - http://www.osvdb.org/8722 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/5568
3Aorg.mitre.oval%3Adef%3A3601 - http://www.osvdb.org/8722 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55680 - http://www.idefense.com/advisory/07.29.03.txt
CVE ID: CVE-2003-0610 State: PUBLISHED Published: 2003-08-01T04:00:00 Last Updated: 2024-08-08T01:58:11.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.nai.com/us/promos/mcafee/epo_vulnerabilities.asp
CVE ID: CVE-2003-0611 State: PUBLISHED Published: 2003-08-01T04:00:00 Last Updated: 2024-08-08T01:58:11.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in xtokkaetama 1.0 allow local users to gain privileges via a long (1) -display command line argument or (2) XTOKKAETAMADIR environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-356 - http://www.securityfocus.com/bid/8312
CVE ID: CVE-2003-0612 State: PUBLISHED Published: 2004-03-10T05:00:00 Last Updated: 2024-08-08T01:58:11.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9893 - http://securitytracker.com/id?1009398 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=203541 - http://www.securityfocus.com/archive/1/357601 - http://packages.debian.org/changelogs/pool/non-free/c/crafty/crafty_19.15-1/changelog.txt - https://exchange.xforce.ibmcloud.com/vu
ages.debian.org/changelogs/pool/non-free/c/crafty/crafty_19.15-1/changelog.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/13017 - http://securitytracker.com/id?1009393 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15501 - http://secunia.com/advisories/9577/
CVE ID: CVE-2003-0613 State: PUBLISHED Published: 2003-08-14T04:00:00Z Last Updated: 2024-09-17T00:02:14.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in zblast-svgalib of zblast 1.2.1 and earlier allows local users to execute arbitrary code via the high score file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-369
CVE ID: CVE-2003-0614 State: PUBLISHED Published: 2003-08-01T04:00:00 Last Updated: 2024-08-08T01:58:11.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script via the searchstring parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/330676 - http://www.debian.org/security/2003/dsa-355 - http://marc.info/?l=bugtraq&m=106252092421469&w=2 - http://www.securityfocus.com/archive/1/348641/30/21790/threaded - http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=82&mode
rchive/1/348641/30/21790/threaded - http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=82&mode=thread&order=0&thold=0
CVE ID: CVE-2003-0615 State: PUBLISHED Published: 2003-08-01T04:00:00 Last Updated: 2024-08-08T01:58:11.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=105875211018698&w=2 - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2003:084 - http://www.debian.org/security/2003/dsa-371 - http://marc.info/?l=bugtraq&m=105880349328877&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000713 - http:
://marc.info/?l=bugtraq&m=105880349328877&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000713 - http://www.ciac.org/ciac/bulletins/n-155.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/12669 - http://marc.info/?l=bugtraq&m=106018783704468&w=2 - http://securitytracker.com/id?1007234 - http://www.redhat.com/support/errata/RHSA-2003-256.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101426-1 - http://secunia.com/advisories/13638 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A470 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A307 - http://www.securityfocus.com/bid/
//oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A307 - http://www.securityfocus.com/bid/8231 - http://www.kb.cert.org/vuls/id/246409
CVE ID: CVE-2003-0616 State: PUBLISHED Published: 2003-08-01T04:00:00 Last Updated: 2024-08-08T01:58:11.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a073103-1.txt - http://www.nai.com/us/promos/mcafee/epo_vulnerabilities.asp
CVE ID: CVE-2003-0617 State: PUBLISHED Published: 2003-08-05T04:00:00 Last Updated: 2024-08-08T01:58:11.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: mindi 0.58 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-362 - http://marc.info/?l=bugtraq&m=106252097421549&w=2
CVE ID: CVE-2003-0618 State: PUBLISHED Published: 2004-03-25T05:00:00 Last Updated: 2024-08-08T01:58:11.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obtain sensitive information about files for which the user does not have appropriate permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9543 - http://www.debian.org/security/2004/dsa-431 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=203426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15012
CVE ID: CVE-2003-0619 State: PUBLISHED Published: 2003-08-01T04:00:00 Last Updated: 2024-08-08T01:58:11.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (kernel panic) via a negative size value within XDR data of an NFSv3 procedure call. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-198.html - http://www.redhat.com/support/errata/RHSA-2003-239.html - http://www.debian.org/security/2004/dsa-358 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
http://www.debian.org/security/2004/dsa-358 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A386 - http://marc.info/?l=bugtraq&m=105950927708272&w=2
CVE ID: CVE-2003-0620 State: PUBLISHED Published: 2003-08-01T04:00:00 Last Updated: 2024-08-08T01:58:11.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via (1) MANDATORY_MANPATH, MANPATH_MAP, and MANDB_MAP arguments to add_to_dirlist in manp.c, (2) a long pathname to ult_src in ult_src.c, (3) a long .so argument to test_for_include in ult_src.c, (4) a long MANPATH environment variable, or (5) a long PATH environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105951284512898&w=2 - http://marc.info/?l=bu
Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105951284512898&w=2 - http://marc.info/?l=bugtraq&m=105960276803617&w=2 - http://www.debian.org/security/2003/dsa-364
CVE ID: CVE-2003-0621 State: PUBLISHED Published: 2003-11-05T05:00:00 Last Updated: 2024-08-08T01:58:11.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106762000607681&w=2 - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/advisory03_38_00.jsp - https://exchange.xforce.ibmcloud.com/vulnerabilities/13559 - http://www.securityfocus.com/bid/8931
CVE ID: CVE-2003-0622 State: PUBLISHED Published: 2003-11-05T05:00:00 Last Updated: 2024-08-08T01:58:11.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service (hang) via pathname arguments that contain MS-DOS device names such as CON and AUX. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106762000607681&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13560 - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/advisory03_38_00.jsp - http://www.securityfocus.com/bid/8931
CVE ID: CVE-2003-0623 State: PUBLISHED Published: 2003-11-05T05:00:00 Last Updated: 2024-08-08T01:58:11.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to inject arbitrary web script via the INIFILE argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13561 - http://marc.info/?l=bugtraq&m=106762000607681&w=2 - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/advisory03_38_00.jsp - http://www.securityfocus.com/bid/8931
CVE ID: CVE-2003-0624 State: PUBLISHED Published: 2003-11-05T05:00:00 Last Updated: 2024-08-08T01:58:11.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier allows remote attackers to inject malicious web script via the person parameter. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/SA_BEA03_36.00.jsp - http://www.securityfocus.com/bid/8938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13568 - http://marc.info/?l=bugtraq&m=106761926906781&w=2
CVE ID: CVE-2003-0625 State: PUBLISHED Published: 2003-08-01T04:00:00 Last Updated: 2024-08-08T01:58:11.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the server's response. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-360 - http://marc.info/?l=bugtraq&m=105941103709264&w=2 - http://developer.berlios.de/forum/forum.php?forum_id=2819 - http://www.securityfocus.com/bid/8255
CVE ID: CVE-2003-0626 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T01:58:11.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the (1) headername or (2) footername arguments. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013652.html - http://www.auscert.org.au/render.html?it=3610 - http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0042.html - http://www.securityfocus.com/bid/9037 - http://www.secunia.com/advisories/10225/ - https://exchange.xforce.ibmcloud
ml - http://www.securityfocus.com/bid/9037 - http://www.secunia.com/advisories/10225/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/13754
CVE ID: CVE-2003-0627 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T01:58:11.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to cause a denial of service (application crash), possibly via the headername and footername arguments. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013652.html - http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0042.html - http://www.secunia.com/advisories/10225/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/13754 - http://www.securityfocus.com/bi
nia.com/advisories/10225/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/13754 - http://www.securityfocus.com/bid/9038
CVE ID: CVE-2003-0628 State: PUBLISHED Published: 2003-11-18T05:00:00 Last Updated: 2024-08-08T01:58:11.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include (SSI) files via an HTTP request with an invalid value. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106874146204158&w=2
CVE ID: CVE-2003-0629 State: PUBLISHED Published: 2003-11-18T05:00:00 Last Updated: 2024-08-08T01:58:11.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScript. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106874146204158&w=2
CVE ID: CVE-2003-0630 State: PUBLISHED Published: 2003-09-04T04:00:00 Last Updated: 2024-08-08T01:58:11.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator (atari800) before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrated with the -osa_rom argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-359 - http://marc.info/?l=bugtraq&m=106252128221901&w=2