Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-0419 State: PUBLISHED Published: 2003-06-18T04:00:00 Last Updated: 2024-08-08T01:50:48.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: SMC Networks Barricade Wireless Cable/DSL Broadband Router SMC7004VWBR allows remote attackers to cause a denial of service via certain packets to PPTP port 1723 on the internal interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/advisory/06.11.03.txt
CVE ID: CVE-2003-0420 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T01:50:48.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the account running the tool. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/12342 - http://secunia.com/advisories/9025/ - http://www.securityfocus.com/bid/7894 - http://www.auscert.org.au/render.html?it=3165 - http://www.kb.cert.org/vuls/id/JPLA-5NTL8E
CVE ID: CVE-2003-0421 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:50:48.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0502. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html - http://www.rapid7.com/advisories/R7-0015.html
CVE ID: CVE-2003-0422 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:50:48.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via a request to view_broadcast.cgi that does not contain the required parameters. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html - http://www.rapid7.com/advisories/R7-0015.html
CVE ID: CVE-2003-0423 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:50:48.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: parse_xml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to obtain the source code for parseable files via the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html - http://www.rapid7.com/advisories/R7-0015.html
CVE ID: CVE-2003-0424 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:50:48.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space (%20) or . (%2e) characters to an HTTP request for the script, e.g. view_broadcast.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html - http://www.rapid7.com/advisories/R7-0015.html
CVE ID: CVE-2003-0425 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:50:48.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to read arbitrary files via a ... (triple dot) in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html - http://www.rapid7.com/advisories/R7-0015.html
CVE ID: CVE-2003-0426 State: PUBLISHED Published: 2003-07-25T04:00:00 Last Updated: 2024-08-08T01:50:48.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0040.html - http://www.rapid7.com/advisories/R7-0015.html
CVE ID: CVE-2003-0427 State: PUBLISHED Published: 2003-06-20T04:00:00 Last Updated: 2024-08-08T01:50:48.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mikmod 3.1.6 and earlier allows remote attackers to execute arbitrary code via an archive file that contains a file with a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-320 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10194 - http://www.redhat.com/support/errata/RHSA-2005-506.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A647
CVE ID: CVE-2003-0428 State: PUBLISHED Published: 2003-06-18T04:00:00 Last Updated: 2024-08-08T01:50:48.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the DCERPC (DCE/RPC) dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (memory consumption) via a certain NDR string. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-030.0.txt - http://www.redhat.com/support/errata/RHSA-2003-077.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000662 - http://www.debian.org/security/2003/dsa-324 - http://secunia.com/advisories/9007 - http://ww
coes/?id=a&anuncio=000662 - http://www.debian.org/security/2003/dsa-324 - http://secunia.com/advisories/9007 - http://www.ethereal.com/appnotes/enpa-sa-00010.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A75 - http://www.kb.cert.org/vuls/id/542540
CVE ID: CVE-2003-0429 State: PUBLISHED Published: 2003-06-18T04:00:00 Last Updated: 2024-08-08T01:50:48.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-030.0.txt - http://www.redhat.com/support/errata/RHSA-2003-077.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000662 - http://www.debian.org/security/2003/dsa-324 - http://secunia.
istro.conectiva.com.br/atualizacoes/?id=a&anuncio=000662 - http://www.debian.org/security/2003/dsa-324 - http://secunia.com/advisories/9007 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A84 - http://www.ethereal.com/appnotes/enpa-sa-00010.html
CVE ID: CVE-2003-0430 State: PUBLISHED Published: 2003-06-18T04:00:00 Last Updated: 2024-08-08T01:50:48.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (crash) via an invalid ASN.1 value. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-030.0.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A88 - http://www.redhat.com/support/errata/RHSA-2003-077.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000662 - http://secunia.com/advisories/9007 - http://ww
html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000662 - http://secunia.com/advisories/9007 - http://www.ethereal.com/appnotes/enpa-sa-00010.html
CVE ID: CVE-2003-0431 State: PUBLISHED Published: 2003-06-18T04:00:00 Last Updated: 2024-08-08T01:50:48.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tvb_get_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-030.0.txt - http://www.redhat.com/support/errata/RHSA-2003-077.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000662 - http://www.debian.org/security/2003/dsa-324 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A101 -
org/security/2003/dsa-324 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A101 - http://secunia.com/advisories/9007 - http://www.ethereal.com/appnotes/enpa-sa-00010.html
CVE ID: CVE-2003-0432 State: PUBLISHED Published: 2003-06-18T04:00:00 Last Updated: 2024-08-08T01:50:48.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-030.0.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A106 - http://www.redhat.com/support/errata/RHSA-2003-077.html - http://distro.conectiva.com.br/atualizacoes/?
al%3Adef%3A106 - http://www.redhat.com/support/errata/RHSA-2003-077.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000662 - http://www.debian.org/security/2003/dsa-324 - http://secunia.com/advisories/9007 - http://www.ethereal.com/appnotes/enpa-sa-00010.html
CVE ID: CVE-2003-0433 State: PUBLISHED Published: 2003-06-18T04:00:00Z Last Updated: 2024-09-17T03:27:30.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in gnocatan 0.6.1 and earlier allow attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-315
CVE ID: CVE-2003-0434 State: PUBLISHED Published: 2003-06-18T04:00:00 Last Updated: 2024-08-08T01:50:48.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/9038 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:071 - http://www.kb.cert.org/vuls/id/200132 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005719.html - http://www.redhat.com/support/errata/RHSA-2003-196.html - http://secunia.c
rmail/full-disclosure/2003-June/005719.html - http://www.redhat.com/support/errata/RHSA-2003-196.html - http://secunia.com/advisories/9037 - http://www.redhat.com/support/errata/RHSA-2003-197.html - http://marc.info/?l=bugtraq&m=105777963019186&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A664
CVE ID: CVE-2003-0435 State: PUBLISHED Published: 2003-06-18T04:00:00 Last Updated: 2024-08-08T01:50:48.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in net_swapscore for typespeed 0.4.1 and earlier allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-322 - http://marc.info/?l=bugtraq&m=105553002105111&w=2
CVE ID: CVE-2003-0436 State: PUBLISHED Published: 2003-06-20T04:00:00 Last Updated: 2024-08-08T01:50:48.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005543.html - http://www.securityfocus.com/bid/7865
CVE ID: CVE-2003-0437 State: PUBLISHED Published: 2003-06-20T04:00:00 Last Updated: 2024-08-08T01:50:48.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7866 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005543.html
CVE ID: CVE-2003-0438 State: PUBLISHED Published: 2003-06-28T04:00:00Z Last Updated: 2024-09-16T16:17:52.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-325
CVE ID: CVE-2003-0439 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0440 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:50:48.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) semi MIME library 1.14.5 and earlier, and (2) wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A569 - http://www.redhat.com/support/errata/RHSA-2003-231.html - http://www.debian.org/security/2003/dsa-339 - http://www.redhat.com/support/errata/RHSA-2003-234.html
CVE ID: CVE-2003-0441 State: PUBLISHED Published: 2004-02-19T05:00:00 Last Updated: 2024-08-08T01:50:48.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Orville Write (orville-write) 2.53 and earlier allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/12381 - http://www.debian.org/security/2003/dsa-326 - http://www.securityfocus.com/bid/7988
CVE ID: CVE-2003-0442 State: PUBLISHED Published: 2003-06-20T04:00:00 Last Updated: 2024-08-08T01:50:48.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remote attackers to insert arbitrary script via the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2003:082 - http://www.securitytracker.com/id?1008653 - http://www.securityfocus.com/bid/7761 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000691 - http://shh.thathost.com/secadv/2003-05-11-
bid/7761 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000691 - http://shh.thathost.com/secadv/2003-05-11-php.txt - http://www.debian.org/security/2003/dsa-351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12259 - http://marc.info/?l=bugtraq&m=105760591228031&w=2 - http://www.turbolinux.co.jp/security/2003/TLSA-2003-47j.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A485 - http://marc.info/?l=bugtraq&m=105449314612963&w=2 - http://www.osvdb.org/4758 - http://www.ciac.org/ciac/bulletins/n-112.shtml - http://www.redhat.com/support/errata/RHSA-2003-204.html
CVE ID: CVE-2003-0444 State: PUBLISHED Published: 2004-03-10T05:00:00 Last Updated: 2024-08-08T01:50:48.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in GTKSee 0.5 and 0.5.1 allows remote attackers to execute arbitrary code via a PNG image of certain color depths. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12462 - http://www.securityfocus.com/bid/8061
CVE ID: CVE-2003-0445 State: PUBLISHED Published: 2003-06-24T04:00:00Z Last Updated: 2024-09-17T03:03:41.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a long Request-URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-328
CVE ID: CVE-2003-0446 State: PUBLISHED Published: 2003-06-20T04:00:00 Last Updated: 2024-08-08T01:50:48.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) in Internet Explorer 5.5 and 6.0, possibly in a component that is also used by other Microsoft products, allows remote attackers to insert arbitrary web script via an XML file that contains a parse error, which inserts the script in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/12334 - http://marc.info/?l=bugtraq&m=105595990924165&w=2 - http://www.osvdb.org/3065 - http://archives.neohapsis.com/archive
- http://marc.info/?l=bugtraq&m=105595990924165&w=2 - http://www.osvdb.org/3065 - http://archives.neohapsis.com/archives/bugtraq/2003-06/0120.html - http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005762.html - http://marc.info/?l=ntbugtraq&m=105585001905002&w=2 - http://www.securityfocus.com/bid/7938 - http://secunia.com/advisories/9055 - http://security.greymagic.com/adv/gm013-ie/ - http://marc.info/?l=bugtraq&m=105585986015421&w=2
CVE ID: CVE-2003-0447 State: PUBLISHED Published: 2003-06-20T04:00:00 Last Updated: 2024-08-08T01:50:48.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Custom HTTP Errors capability in Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute script in the Local Zone via an argument to shdocvw.dll that causes a "javascript:" link to be generated. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005763.html - http://marc.info/?l=bugtraq&m=105585933614773&w=2 - http://security.greymagic.com/adv/gm014-ie/ - http://marc.info/?l=ntbugtraq&m=105585142406147&w=2
CVE ID: CVE-2003-0448 State: PUBLISHED Published: 2003-06-20T04:00:00 Last Updated: 2024-08-08T01:50:48.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portmon 1.7 and possibly earlier versions allows local users to read and write arbitrary files via the (1) -c (host file) or (2) -l (log file) command line options. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105588111714856&w=2
CVE ID: CVE-2003-0449 State: PUBLISHED Published: 2003-06-20T04:00:00 Last Updated: 2024-08-08T01:50:48.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to gain privileges via (1) a PATH environment variable that points to malicious libraries, as demonstrated using libjutil.so in_proapsv, or (2) the -installdir command line parameter, as demonstrated using librocket_r.so in _dbagent. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105561134624665&w=2 - http://www.secnetops.com/research/advisories/SRT2003-06-13-1009.t
- http://marc.info/?l=bugtraq&m=105561134624665&w=2 - http://www.secnetops.com/research/advisories/SRT2003-06-13-1009.txt - http://www.secnetops.com/research/advisories/SRT2003-06-13-0945.txt - http://marc.info/?l=bugtraq&m=105561189625082&w=2
CVE ID: CVE-2003-0450 State: PUBLISHED Published: 2003-06-20T04:00:00 Last Updated: 2024-08-08T01:50:48.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cistron RADIUS daemon (radiusd-cistron) 1.6.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large value in an NAS-Port attribute, which is interpreted as a negative number and causes a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.turbolinux.com/security/TLSA-2003-40.txt - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=196063 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000664 - http://www.debian.org/sec
/bugreport.cgi?bug=196063 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000664 - http://www.debian.org/security/2003/dsa-321 - http://www.novell.com/linux/security/advisories/2003_030_radiusd_cistron.html
CVE ID: CVE-2003-0451 State: PUBLISHED Published: 2003-06-24T04:00:00Z Last Updated: 2024-09-16T20:47:15.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in xbl before 1.0k allow local users to gain privileges via certain long command line arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-327
CVE ID: CVE-2003-0452 State: PUBLISHED Published: 2003-06-24T04:00:00Z Last Updated: 2024-09-17T00:16:03.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in osh before 1.7-11 allow local users to execute arbitrary code and bypass shell restrictions via (1) long environment variables or (2) long "file redirections." Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-329
CVE ID: CVE-2003-0453 State: PUBLISHED Published: 2003-06-24T04:00:00 Last Updated: 2024-08-08T01:50:48.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: traceroute-nanog 6.1.1 allows local users to overwrite unauthorized memory and possibly execute arbitrary code via certain "nprobes" and "max_ttl" arguments that cause an integer overflow that is used when allocating memory, which leads to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-348 - http://marc.info/?l=bugtraq&m=105613905425563&w=2
CVE ID: CVE-2003-0454 State: PUBLISHED Published: 2003-07-04T04:00:00Z Last Updated: 2024-09-16T17:47:50.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-334
CVE ID: CVE-2003-0455 State: PUBLISHED Published: 2003-07-04T04:00:00 Last Updated: 2024-08-08T01:58:09.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: The imagemagick libmagick library 5.5 and earlier creates temporary files insecurely, which allows local users to create or overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-494.html - http://www.debian.org/security/2003/dsa-331 - http://marc.info/?l=bugtraq&m=105786393628728&w=2
CVE ID: CVE-2003-0456 State: PUBLISHED Published: 2003-07-15T04:00:00 Last Updated: 2024-08-08T01:58:10.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folder that does not exist, which leaks the pathname in an error message, as demonstrated using _vti_bin/fpcount.exe. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105733894003737&w=2 - http://www.krusesecurity.dk/advisories/vis0103.txt - http://www.securityfocus.com/bid/8075 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0002.html - https://exchange.xfor
.securityfocus.com/bid/8075 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/12483