Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tp://www.osvdb.org/7022 - http://secunia.com/advisories/8358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11602 - http://www.securityfocus.com/bid/7144 - http://www.osvdb.org/7021
CVE ID: CVE-2003-1537 State: PUBLISHED Published: 2007-11-14T02:00:00Z Last Updated: 2024-09-17T01:57:05.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in PostNuke 0.723 and earlier allows remote attackers to include arbitrary files named theme.php via the theme parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0117.html
CVE ID: CVE-2003-1538 State: PUBLISHED Published: 2007-12-20T21:00:00Z Last Updated: 2024-09-17T02:21:21.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not properly filter shell metacharacters, which allows remote attackers to execute arbitrary commands via CGI queries. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/7906 - http://www.securitytracker.com/id?1005954 - http://www.novell.com/linux/security/advisories/2003_005_susehelp.html
CVE ID: CVE-2003-1539 State: PUBLISHED Published: 2008-01-10T01:00:00Z Last Updated: 2024-09-17T02:16:57.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before 0.21 allows remote attackers to inject arbitrary web script or HTML via (1) file names and (2) directory names. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=144274 - http://www.securityfocus.com/bid/7035 - http://secunia.com/advisories/8257 - http://sourceforge.net/tracker/index.php?func=detail&aid=695597&group_id=60333&atid=493842
CVE ID: CVE-2003-1540 State: PUBLISHED Published: 2008-02-13T01:00:00 Last Updated: 2024-08-08T02:35:17.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain authentication information via a direct request to (1) !pwds.txt and (2) !nicks.txt. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1006352 - http://www.securityfocus.com/bid/7147 - http://www.securityfocus.com/archive/1/315583/30/25430/threaded - http://secunia.com/advisories/8396 - http://securityreason.com/securityalert/3645 - https://excha
83/30/25430/threaded - http://secunia.com/advisories/8396 - http://securityreason.com/securityalert/3645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11571
CVE ID: CVE-2003-1541 State: PUBLISHED Published: 2008-02-13T23:00:00 Last Updated: 2024-08-08T02:35:16.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: PlanetMoon Guestbook tr3.a stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin script password, and other passwords, via a direct request to files/passwd.txt. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11609 - http://www.securitytracker.com/id?1006360 - http://securityreason.com/securityalert/3653 - http://www.securityfocus.com/bid/7167 - http://www.securityfocus.com/archive
p://securityreason.com/securityalert/3653 - http://www.securityfocus.com/bid/7167 - http://www.securityfocus.com/archive/1/315895/30/25400/threaded - http://secunia.com/advisories/8392
CVE ID: CVE-2003-1542 State: PUBLISHED Published: 2008-02-13T23:00:00Z Last Updated: 2024-09-16T22:25:43.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in plugins/file.php in phpWebFileManager before 0.4.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the fm_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6933 - http://secunia.com/advisories/8183 - http://platon.sk/projects/release_view_page.php?release_id=2
CVE ID: CVE-2003-1543 State: PUBLISHED Published: 2008-02-13T23:00:00 Last Updated: 2024-08-08T02:35:15.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11687 - http://www.securityfocus.com/bid/7344 - http://www.securiteam.com/securitynews/5LP10009FC.html - http://secunia.com/advisories/8477 - http://securitytracker.com/id?1006428 - ht
iteam.com/securitynews/5LP10009FC.html - http://secunia.com/advisories/8477 - http://securitytracker.com/id?1006428 - http://www.geocities.com/gzhangx/websrv/docs/security.html - http://www.lucaercoli.it/advs/bajie.txt
CVE ID: CVE-2003-1544 State: PUBLISHED Published: 2008-02-13T23:00:00 Last Updated: 2024-08-08T02:35:17.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted critical resource lock in Terminal Services for Windows 2000 before SP4 and Windows XP allows remote authenticated users to cause a denial of service (reboot) by obtaining a read lock on msgina.dll, which prevents msgina.dll from being loaded. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/815225/en-us - https://exchange.xforce.ibmcloud.com/vulnerabilities/11141 - http://www.securitytracker.com/id?1005986 - http://securityreason.com/securityalert/3654 - http://secu
abilities/11141 - http://www.securitytracker.com/id?1005986 - http://securityreason.com/securityalert/3654 - http://secunia.com/advisories/7959 - http://www.securityfocus.com/bid/6672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11816 - http://www.securityfocus.com/archive/1/308059 - http://www.securityfocus.com/archive/1/308164
CVE ID: CVE-2003-1545 State: PUBLISHED Published: 2008-02-28T20:00:00 Last Updated: 2024-08-08T02:35:17.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read arbitrary files via a full pathname in the file parameter. NOTE: This was originally reported as an issue in PHP-Nuke 6.5, but this is an independent addon. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/316341/30/25310/threaded - http://www.securityfocus.com/archive/1/316209/30/25340/threaded - http://www.securityfocus.com/archive/1/316585/30/25310/thr
://www.securityfocus.com/archive/1/316209/30/25340/threaded - http://www.securityfocus.com/archive/1/316585/30/25310/threaded - http://www.securityfocus.com/archive/1/316198/30/25340/threaded - http://www.securityfocus.com/archive/1/316327/30/25340/threaded - http://www.securityfocus.com/archive/1/316233/30/25340/threaded - http://www.securityfocus.com/bid/7191 - http://www.securitytracker.com/id?1006377 - http://www.securityfocus.com/archive/1/316179/30/25340/threaded
CVE ID: CVE-2003-1546 State: PUBLISHED Published: 2008-03-06T01:00:00 Last Updated: 2024-08-08T02:35:16.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in gbook.php in Filebased guestbook 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the comment section. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/8317 - http://www.securityfocus.com/bid/7104 - http://www.securitytracker.com/id?1006289 - http://archives.neohapsis.com/archives/bugtraq/2003-03/0219.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11540
CVE ID: CVE-2003-1547 State: PUBLISHED Published: 2008-03-06T01:00:00 Last Updated: 2024-08-08T02:35:16.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in block-Forums.php in the Splatt Forum module for PHP-Nuke 6.x allows remote attackers to inject arbitrary web script or HTML via the subject parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/317230/30/25220/threaded - http://secunia.com/advisories/8478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11675 - http://www.securityfocus.com/archive/1/316925/30/25250/threaded - http://securityreason.com/securityalert/37
ies/11675 - http://www.securityfocus.com/archive/1/316925/30/25250/threaded - http://securityreason.com/securityalert/3718 - http://www.securityfocus.com/bid/7248
CVE ID: CVE-2003-1548 State: PUBLISHED Published: 2008-03-06T01:00:00 Last Updated: 2024-08-08T02:35:17.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to obtain sensitive information via an invalid IDAdmin or other parameter, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1006308 - http://www.securityfocus.com/archive/1/315317/30/25460/threaded - http://www.securityfocus.com/bid/7126 - http://securityreason.com/securityalert/3717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11556 - http://secunia.com/ad
curityreason.com/securityalert/3717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11556 - http://secunia.com/advisories/8320
CVE ID: CVE-2003-1549 State: PUBLISHED Published: 2008-03-06T01:00:00 Last Updated: 2024-08-08T02:35:16.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in header.php in MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the ma_kw parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1006308 - http://www.securityfocus.com/bid/7127 - http://www.securityfocus.com/archive/1/315317/30/25460/threaded - http://www.webmaster-mag.net/?module=distridoc&idCat=3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11557 - http://www.security-c
r-mag.net/?module=distridoc&idCat=3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11557 - http://www.security-corporation.com/download/patch/MyABraCaDaWebv1.0.2XSSpatch.zip - http://securityreason.com/securityalert/3717 - http://secunia.com/advisories/8320
CVE ID: CVE-2003-1550 State: PUBLISHED Published: 2008-03-06T01:00:00 Last Updated: 2024-08-08T02:35:15.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsOption parameter, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7149 - http://www.security-corporation.com/index.php?id=advisories&a=011-FR - http://marc.info/?l=bugtraq&m=104820295115420&w=2 - http://marc.info/?l=bugtraq&m=104887510828106&w=2 - http://secunia.com/advisories/8353 - https://exchange.xforc
20&w=2 - http://marc.info/?l=bugtraq&m=104887510828106&w=2 - http://secunia.com/advisories/8353 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11587
CVE ID: CVE-2003-1551 State: PUBLISHED Published: 2008-03-08T00:00:00 Last Updated: 2024-08-08T02:35:17.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown impact and attack vectors related to "malicious script." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11394 - http://www.securitytracker.com/id?1006171 - http://support.novell.com/servlet/tidfinder/2964956 - http://www.securityfocus.com/bid/6896 - http://secunia.com/advisories/8133
CVE ID: CVE-2003-1552 State: PUBLISHED Published: 2008-03-08T00:00:00 Last Updated: 2024-08-08T02:35:17.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in uploader.php in Uploader 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/313819/30/25640/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/11467 - http://www.securityfocus.com/archive/1/313787/30/25670/threaded
CVE ID: CVE-2003-1553 State: PUBLISHED Published: 2008-03-26T17:00:00 Last Updated: 2024-08-08T02:35:16.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Haakon Nilsen Simple Internet Publishing System (SIPS) 0.2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password and other user information via a direct request to a user-specific configuration directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11572 - http://securityreason.com/securityalert/3780 - http://www.securityfocus.com/archive/1/315504/30/25460/threaded - http://ww
tp://securityreason.com/securityalert/3780 - http://www.securityfocus.com/archive/1/315504/30/25460/threaded - http://www.securityfocus.com/bid/7134
CVE ID: CVE-2003-1554 State: PUBLISHED Published: 2008-03-26T17:00:00 Last Updated: 2024-08-08T02:35:16.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in scozbook/add.php in ScozNet ScozBook 1.1 BETA allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) useremail, (3) aim, (4) msn, (5) sitename and (6) siteaddy variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/316747/30/25280/threaded - http://secunia.com/advisories/8476 - http://www.securityfocus.com/bid/7235 - http://securityreason.com/securityalert/3781 - https://exchange.xforce.ibmc
76 - http://www.securityfocus.com/bid/7235 - http://securityreason.com/securityalert/3781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11658 - http://www.securitytracker.com/id?1006413
CVE ID: CVE-2003-1555 State: PUBLISHED Published: 2008-03-26T17:00:00 Last Updated: 2024-08-08T02:35:15.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: ScozNet ScozBook 1.1 BETA allows remote attackers to obtain sensitive information via an invalid PG parameter in view.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7236 - http://www.securityfocus.com/archive/1/316747/30/25280/threaded - http://secunia.com/advisories/8476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11659 - http://securityreason.com/securityalert/3781 - http://www.securitytracker.com/id?10
ibmcloud.com/vulnerabilities/11659 - http://securityreason.com/securityalert/3781 - http://www.securitytracker.com/id?1006413
CVE ID: CVE-2003-1556 State: PUBLISHED Published: 2008-04-04T01:00:00 Last Updated: 2024-08-08T02:35:16.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cc_guestbook.pl in CGI City CC GuestBook allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) homepage_title (webpage title) parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3796 - http://www.securityfocus.com/bid/7237 - http://www.securityfocus.com/archive/1/316764/30/25250/threaded
CVE ID: CVE-2003-1557 State: PUBLISHED Published: 2008-04-04T01:00:00 Last Updated: 2024-08-08T02:35:17.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B"), allows remote attackers to execute arbitrary code via email containing headers with leading "." characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/309912/30/26090/threaded - http://www.securityfocus.com/bid/6679 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11154 - http://marc.info/?l=bugtraq&m=104342896818777&w=2 - http://www.securityfocus.com/archive/1/
.com/vulnerabilities/11154 - http://marc.info/?l=bugtraq&m=104342896818777&w=2 - http://www.securityfocus.com/archive/1/310212/30/26030/threaded - http://secunia.com/advisories/7983
CVE ID: CVE-2003-1558 State: PUBLISHED Published: 2008-05-09T20:00:00 Last Updated: 2024-08-08T02:35:16.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in httpd.c of fnord 1.6 allows remote attackers to create a denial of service (crash) and possibly execute arbitrary code via a long CGI request passed to the do_cgi function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/307400/30/26270/threaded - http://www.fefe.de/fnord/ - http://secunia.com/advisories/7893 - http://www.securityfocus.com/bid/6635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11121
CVE ID: CVE-2003-1559 State: PUBLISHED Published: 2008-07-14T23:00:00 Last Updated: 2024-08-08T02:35:16.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/348574 - http://www.gadgetopia.com/2003/12/23/OutlookWebAccessPrivacyHole.html - http://www.securityfocus.com/bid/9295 - http://www.securityfocus.com/archive/1/348360 - http://se
cessPrivacyHole.html - http://www.securityfocus.com/bid/9295 - http://www.securityfocus.com/archive/1/348360 - http://securityreason.com/securityalert/3989
CVE ID: CVE-2003-1560 State: PUBLISHED Published: 2008-07-14T23:00:00 Last Updated: 2024-08-08T02:35:16.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4004 - http://www.securityfocus.com/archive/1/348574
CVE ID: CVE-2003-1561 State: PUBLISHED Published: 2008-07-14T23:00:00 Last Updated: 2024-08-08T02:35:16.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4004 - http://www.securityfocus.com/archive/1/348574
CVE ID: CVE-2003-1562 State: PUBLISHED Published: 2008-08-04T10:00:00Z Last Updated: 2024-09-16T19:56:09.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/320153 - http://www.securityfocus
t Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/320153 - http://www.securityfocus.com/archive/1/320302 - http://www.securityfocus.com/bid/7482 - http://www.securityfocus.com/archive/1/320440 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=248747 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2003-1563 State: PUBLISHED Published: 2008-08-18T19:00:00Z Last Updated: 2024-09-16T17:28:37.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters (OPS/RAC) allows local users to cause a denial of service (cluster node panic or abort) by launching a daemon listening on a TCP port that would otherwise be used by the Distributed Lock Manager (DLM), possibly involving this daemon responding in a manner that spoofs a cluster reconfiguration. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-200810-1 - http://sunsolve.sun.
rogram Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-200810-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101393-1 - http://www.auscert.org.au/render.html?it=3672 - http://www.securityfocus.com/bid/9137 - http://www.auscert.org.au/render.html?it=3672
CVE ID: CVE-2003-1564 State: PUBLISHED Published: 2008-09-02T14:00:00 Last Updated: 2024-08-08T02:35:17.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, aka the "billion laughs attack." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31868 - http://xmlsoft.org/news.html - http://www.stylusstudio.com/xmldev/200302/post20020.html - http://www.reddit.com/r/programmi
p://xmlsoft.org/news.html - http://www.stylusstudio.com/xmldev/200302/post20020.html - http://www.reddit.com/r/programming/comments/65843/time_to_upgrade_libxml2 - http://mail.gnome.org/archives/xml/2008-August/msg00034.html - http://www.redhat.com/support/errata/RHSA-2008-0886.html
CVE ID: CVE-2003-1565 State: REJECTED Published: 2003-08-05T04:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2003-1566 State: PUBLISHED Published: 2009-01-15T00:00:00 Last Updated: 2024-08-08T02:35:17.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive information without detection. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.html - http://www.osvdb.org/4864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14077 - http://www.securityfocus.com/bid/9313 - http://www.aqtronix.com/Advisories/AQ-2003-02.txt
CVE ID: CVE-2003-1567 State: PUBLISHED Published: 2009-01-15T00:00:00Z Last Updated: 2024-09-16T16:22:39.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original request in the body of the response, which makes it easier for remote attackers to steal cookies and authentication credentials, or bypass the HttpOnly protection mechanism, by using TRACK to read the contents of the HTTP headers that are returned in the response, a technique that is similar to cross-site tracing (XST) using HTTP TRACE. Additional Analyst Notes: - CVE Program Container: References: - http://a
to cross-site tracing (XST) using HTTP TRACE. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.html - http://www.kb.cert.org/vuls/id/288308 - http://www.aqtronix.com/Advisories/AQ-2003-02.txt - http://www.osvdb.org/5648