Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-0704 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: KisMAC before 0.05d trusts user-supplied variables when chown'ing files or directories, which allows local users to gain privileges via the $DRIVER_KEXT environment variable in (1) viha_driver.sh, (2) macjack_load.sh, (3) airojack_load.sh, (4) setuid_enable.sh, (5) setuid_disable.sh, and using a "similar technique" for (6) viha_prep.sh and (7) viha_unprep.sh. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13009 - https://exchange.xforce.ibmcloud.com/vulnera
References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13010 - http://www.securityfocus.com/bid/8497 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13006 - http://www.atstake.com/research/advisories/2003/a082203-1.txt
CVE ID: CVE-2003-0705 State: PUBLISHED Published: 2003-09-12T04:00:00Z Last Updated: 2024-09-17T03:28:42.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-378
CVE ID: CVE-2003-0706 State: PUBLISHED Published: 2003-09-12T04:00:00Z Last Updated: 2024-09-17T00:16:09.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in mah-jong 1.5.6 and earlier allows remote attackers to cause a denial of service (tight loop). Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-378
CVE ID: CVE-2003-0707 State: PUBLISHED Published: 2003-09-03T04:00:00 Last Updated: 2024-08-08T02:05:12.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in LinuxNode (node) before 0.3.2 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-375
CVE ID: CVE-2003-0708 State: PUBLISHED Published: 2003-09-03T04:00:00 Last Updated: 2024-08-08T02:05:12.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in LinuxNode (node) before 0.3.2 may allow attackers to cause a denial of service or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-375
CVE ID: CVE-2003-0709 State: PUBLISHED Published: 2003-09-03T04:00:00 Last Updated: 2024-08-08T02:05:12.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option. Additional Analyst Notes: - CVE Program Container: References: - http://www.zone-h.org/en/advisories/read/id=2925/
CVE ID: CVE-2003-0711 State: PUBLISHED Published: 2003-10-17T04:00:00 Last Updated: 2024-08-08T02:05:12.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the PCHealth system in the Help and Support Center function in Windows XP and Windows Server 2003 allows remote attackers to execute arbitrary code via a long query in an HCP URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/467036 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3889 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3685 - http://www.cert.org/advisori
tps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3685 - http://www.cert.org/advisories/CA-2003-27.html - http://www.securityfocus.com/bid/8828 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4706 - http://marc.info/?l=bugtraq&m=106631908105696&w=2 - http://www.ngssoftware.com/advisories/ms-pchealth.txt - http://marc.info/?l=ntbugtraq&m=106632194809632&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A217 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-044
CVE ID: CVE-2003-0712 State: PUBLISHED Published: 2003-10-17T04:00:00 Last Updated: 2024-08-08T02:05:12.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web Access (OWA) allows remote attackers to execute arbitrary web script. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2003-27.html - http://marc.info/?l=bugtraq&m=106631918405915&w=2 - http://www.securityfocus.com/bid/8832 - http://www.kb.cert.org/vuls/id/435444 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms0
2 - http://www.kb.cert.org/vuls/id/435444 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-047
CVE ID: CVE-2003-0714 State: PUBLISHED Published: 2003-10-17T04:00:00 Last Updated: 2024-08-08T02:05:12.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2003-27.html - http://marc.info/?l=bugtraq&m=106682909006586&w=2 - http://www.kb.cert.org/vuls/id/422156 - https://docs.microsoft.com/en-us/security-
fo/?l=bugtraq&m=106682909006586&w=2 - http://www.kb.cert.org/vuls/id/422156 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-046 - http://www.securityfocus.com/bid/8838
CVE ID: CVE-2003-0715 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0528. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/483492 - http://www.cert.org/advisories/CA-2003-23.html - https://oval.cisecurity.org/repository/search/defin
rg/vuls/id/483492 - http://www.cert.org/advisories/CA-2003-23.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1813 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A20 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1202 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4224 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A264 - http://marc.info/?l=bugtraq&m=106322856608909&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-039
CVE ID: CVE-2003-0717 State: PUBLISHED Published: 2003-10-17T04:00:00 Last Updated: 2024-08-08T02:05:12.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allows remote attackers to execute arbitrary code via a buffer overflow attack. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106666713812158&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A213 - http://marc.info/?l=ntbugtraq&m=106632188709562&w=2 - http://www.cert.org/advisories/CA-2003-27.html - http://www.kb.cert.org/v
marc.info/?l=ntbugtraq&m=106632188709562&w=2 - http://www.cert.org/advisories/CA-2003-27.html - http://www.kb.cert.org/vuls/id/575892 - http://www.securityfocus.com/bid/8826 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A268 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-043
CVE ID: CVE-2003-0718 State: PUBLISHED Published: 2004-10-16T04:00:00 Last Updated: 2024-08-08T02:05:12.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing XML elements with a large number of attributes. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17645 - https://exchange.xforce.i
l%3Aorg.mitre.oval%3Adef%3A4767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17656 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1330 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-030 - http://marc.info/?l=bugtraq&m=109762641822064&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1427
CVE ID: CVE-2003-0719 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T02:05:12.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1093 - http://www.securityfocus.com/archive/1/361836 - htt
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1093 - http://www.securityfocus.com/archive/1/361836 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 - http://www.kb.cert.org/vuls/id/586540 - http://www.us-cert.gov/cas/techalerts/TA04-104A.html - http://xforce.iss.net/xforce/alerts/id/168 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A889 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A903 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A951
CVE ID: CVE-2003-0720 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-274.html - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0099.html - http://marc.info/?l=bugtraq&m=106329356702508&w=2 - http://www.redhat.com/support/errata/RHSA-2003-273.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A499 - ht
ata/RHSA-2003-273.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A499 - http://www.idefense.com/advisory/09.10.03.txt - http://marc.info/?l=bugtraq&m=106322571805153&w=2
CVE ID: CVE-2003-0721 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array access using a negative number. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-274.html - http://marc.info/?l=bugtraq&m=106329356702508&w=2 - http://marc.info/?l=bugtraq&m=106367213400313&w=2 - http://www.redhat.com/support/errata/RHSA-2003-273.html - http://www.idefense.com/advisory/09.
q&m=106367213400313&w=2 - http://www.redhat.com/support/errata/RHSA-2003-273.html - http://www.idefense.com/advisory/09.10.03.txt - http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009850.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A503
CVE ID: CVE-2003-0722 State: PUBLISHED Published: 2003-09-17T04:00:00 Last Updated: 2024-08-08T02:05:12.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/41870 - http://www.securityfocus.com/bid/8615 - http://secunia.com/advisories/9742 - http://www.ciac.org/ciac/bulletins/n-148.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
/www.ciac.org/ciac/bulletins/n-148.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1273 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0115.html - http://www.idefense.com/advisory/09.16.03.txt - http://sunsolve.sun.com/search/document.do?assetkey=1-26-56740-1&searchclause=security - http://marc.info/?l=bugtraq&m=106391959014331&w=2
CVE ID: CVE-2003-0723 State: PUBLISHED Published: 2003-09-03T04:00:00 Last Updated: 2024-08-08T02:05:12.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2003:087
CVE ID: CVE-2003-0724 State: PUBLISHED Published: 2003-09-03T04:00:00Z Last Updated: 2024-09-16T22:01:48.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: ssh on HP Tru64 UNIX 5.1B and 5.1A does not properly handle RSA signatures when digital certificates and RSA keys are used, which could allow local and remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/advisories/5736 - http://www.securityfocus.com/bid/8492
CVE ID: CVE-2003-0725 State: PUBLISHED Published: 2003-09-03T04:00:00 Last Updated: 2024-08-08T02:05:12.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/934932 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0087.html - http://www.service.real.com/help/faq/security/rootexploit082203.html - http://www.securityfocus.com/bid/8476 - htt
tml - http://www.service.real.com/help/faq/security/rootexploit082203.html - http://www.securityfocus.com/bid/8476 - http://lists.immunitysec.com/pipermail/dailydave/2003-August/000030.html
CVE ID: CVE-2003-0726 State: PUBLISHED Published: 2003-09-03T04:00:00 Last Updated: 2024-08-08T02:05:12.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is executed in the security context of the previously loaded URL, as demonstrated using a "javascript:" URL in the area tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8453 - http://www.digitalpranksters.com/advisories/realnetworks/smilscriptprotocol.html - https://exchange.xforce.ibmcloud.com/vulnerabil
.digitalpranksters.com/advisories/realnetworks/smilscriptprotocol.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/13028 - http://www.securityfocus.com/archive/1/335293 - http://www.service.real.com/help/faq/security/securityupdate_august2003.html - http://securitytracker.com/id?1007532
CVE ID: CVE-2003-0727 State: PUBLISHED Published: 2003-09-03T04:00:00 Last Updated: 2024-08-08T02:05:12.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions. Additional Analyst Notes: - CVE Program Container: References: - http://otn.oracle.com/deploy/security/pdf/2003Alert58.pdf - https://www.exploit-db.com/exploits/42780/
CVE ID: CVE-2003-0728 State: PUBLISHED Published: 2003-09-03T04:00:00 Last Updated: 2024-08-08T02:05:12.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106081310531567&w=2 - http://marc.info/?l=bugtraq&m=106252836330987&w=2
CVE ID: CVE-2003-0729 State: PUBLISHED Published: 2003-09-03T04:00:00 Last Updated: 2024-08-08T02:05:12.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a TFTP request with a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0091.html - http://marc.info/?l=bugtraq&m=106252411425545&w=2 - http://www.securiteam.com/windowsntfocus/5RP0M1PAUM.html
CVE ID: CVE-2003-0730 State: PUBLISHED Published: 2003-09-03T04:00:00 Last Updated: 2024-08-08T02:05:12.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflow attacks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24168 - http://support.avaya.com/elmodocs2/security/ASA-2007-074.htm - http://marc.info/?l=bugtraq&m=106229335312429&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821 - http://www.vupen.com/english/advisori
335312429&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821 - http://www.vupen.com/english/advisories/2007/0589 - http://www.securityfocus.com/bid/8514 - ftp://patches.sgi.com/support/free/security/advisories/20031101-01-U.asc - http://www.mandriva.com/security/advisories?name=MDKSA-2003:089 - http://www.redhat.com/support/errata/RHSA-2003-289.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102803-1 - http://www.redhat.com/support/errata/RHSA-2003-287.html - http://www.redhat.com/support/errata/RHSA-2003-286.html - http://secunia.com/advisories/24247 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-015.txt.asc - http://www.debian.org/se
isories/24247 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-015.txt.asc - http://www.debian.org/security/2003/dsa-380 - http://www.redhat.com/support/errata/RHSA-2003-288.html
CVE ID: CVE-2003-0731 State: PUBLISHED Published: 2003-09-04T04:00:00Z Last Updated: 2024-09-16T23:11:05.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/333028 - http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml
CVE ID: CVE-2003-0732 State: PUBLISHED Published: 2003-09-04T04:00:00Z Last Updated: 2024-09-17T01:00:40.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/333028 - http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml
CVE ID: CVE-2003-0733 State: PUBLISHED Published: 2003-09-04T04:00:00 Last Updated: 2024-08-08T02:05:12.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary web script and steal authentication credentials via (1) a forward instruction to the Servlet container or (2) other vulnerabilities in the WebLogic Server console application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8357 - http://dev2dev.bea.com/resourcelibrary/advisoriesnot
am Container: References: - http://www.securityfocus.com/bid/8357 - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/SA_BEA03_36.00.jsp
CVE ID: CVE-2003-0734 State: PUBLISHED Published: 2003-09-04T04:00:00 Last Updated: 2024-08-08T02:05:12.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the pam_filter mechanism in pam_ldap before version 162, when LDAP based authentication is being used, allows users to bypass host-based access restrictions and log onto the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2003:088
CVE ID: CVE-2003-0735 State: PUBLISHED Published: 2003-09-04T04:00:00 Last Updated: 2024-08-08T02:05:12.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Calendar module of phpWebSite 0.9.x and earlier allows remote attackers to execute arbitrary SQL queries, as demonstrated using the year parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/925166 - http://marc.info/?l=bugtraq&m=106252188522715&w=2 - http://marc.info/?l=bugtraq&m=106062021711496&w=2
CVE ID: CVE-2003-0736 State: PUBLISHED Published: 2003-09-04T04:00:00 Last Updated: 2024-08-08T02:05:12.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script via (1) the day parameter in the calendar module, (2) the fatcat_id parameter in the fatcat module, (3) the PAGE_id parameter in the pagemaster module, (4) the PDA_limit parameter in the search, and (5) possibly other parameters in the calendar, fatcat, and pagemaster modules. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106252188522715&w=2
les. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106252188522715&w=2 - http://www.kb.cert.org/vuls/id/664422 - http://marc.info/?l=bugtraq&m=106062021711496&w=2