Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-0270 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet or non-WEP connections. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11980 - http://secunia.com/advisories/8773 - http://securitytracker.com/id?1006742 - http://
bmcloud.com/vulnerabilities/11980 - http://secunia.com/advisories/8773 - http://securitytracker.com/id?1006742 - http://www.securityfocus.com/bid/7554 - http://www.atstake.com/research/advisories/2003/a051203-1.txt
CVE ID: CVE-2003-0271 State: PUBLISHED Published: 2003-05-09T04:00:00 Last Updated: 2024-08-08T01:50:47.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument. Additional Analyst Notes: - CVE Program Container: References: - http://security.nnov.ru/search/document.asp?docid=4309 - http://www.securityfocus.com/archive/1/316958 - http://marc.info/?l=bugtraq&m=105240469318622&w=2
CVE ID: CVE-2003-0272 State: PUBLISHED Published: 2003-05-09T04:00:00 Last Updated: 2024-08-08T01:50:47.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cookie to an "adminok" value. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105240907024660&w=2 - http://www.frog-man.org/tutos/miniPortail.txt
CVE ID: CVE-2003-0273 State: PUBLISHED Published: 2003-05-09T04:00:00 Last Updated: 2024-08-08T01:50:47.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web interface for Request Tracker (RT) 1.0 through 1.0.7 allows remote attackers to execute script via message bodies. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fsck.com/pipermail/rt-announce/2003-May/000071.html - http://marc.info/?l=bugtraq&m=105240947225275&w=2
CVE ID: CVE-2003-0274 State: PUBLISHED Published: 2003-05-09T04:00:00 Last Updated: 2024-08-08T01:50:47.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute arbitrary code via a long ULISTPROC_UMASK value. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105241224228693&w=2
CVE ID: CVE-2003-0275 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSI.php in YaBB SE 1.5.2 allows remote attackers to execute arbitrary PHP code by modifying the sourcedir parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105249980809988&w=2
CVE ID: CVE-2003-0276 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GET request with a large number of / characters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11889 - http://www.securityfocus.com/bid/7555 - http://marc.info/?l=bugtraq&m=105275789410250&w=2 - http://marc.info/?l=bugtraq&m=105155818012718&w=2
CVE ID: CVE-2003-0277 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11987 - http://www.securityfocus.com/bid/7559 - http://marc.info/?l=bugtraq&m=105276130814262&w=2
CVE ID: CVE-2003-0278 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to insert arbitrary web script via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11988 - http://marc.info/?l=bugtraq&m=105276130814262&w=2
CVE ID: CVE-2003-0279 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5 allows remote attackers to steal sensitive information via numeric fields, as demonstrated using (1) the viewlink function and cid parameter, or (2) index.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105276019312980&w=2 - http://www.securityfocus.com/bid/7588 - http://www.securityfocus.com/bid/7558 - http://archives.neohapsis.com/archives/bugtraq/2003-05/0147.html - https://exchange
p://www.securityfocus.com/bid/7558 - http://archives.neohapsis.com/archives/bugtraq/2003-05/0147.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11984
CVE ID: CVE-2003-0280 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7548 - http://www.securityfocus.com/bid/7547 - http://marc.info/?l=bugtraq&m=105258772101349&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0062.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11975
CVE ID: CVE-2003-0281 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_inet_server, (2) gds_lock_mgr, or (3) gds_drop. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11977 - http://security.gentoo.org/glsa/glsa-200405-18.xml - http://seclists.org/lists/bugtraq/2002/Jun/0212.html - http://marc.info
://security.gentoo.org/glsa/glsa-200405-18.xml - http://seclists.org/lists/bugtraq/2002/Jun/0212.html - http://marc.info/?l=bugtraq&m=105259012802997&w=2 - http://www.securityfocus.com/bid/7546 - http://secunia.com/advisories/8758
CVE ID: CVE-2003-0282 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105259038503175&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12004 - http://www.info-zip.org/FAQ.html - http://www.redhat.com/support/errata/RHSA-2003-199.ht
oud.com/vulnerabilities/12004 - http://www.info-zip.org/FAQ.html - http://www.redhat.com/support/errata/RHSA-2003-199.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:073 - http://www.turbolinux.com/security/TLSA-2003-42.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A619 - http://www.ciac.org/ciac/bulletins/n-111.shtml - ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-031.0.txt - http://www.securityfocus.com/bid/7550 - ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-031.0.txt - http://marc.info/?l=bugtraq&m=105786446329347&w=2 - http://www.redhat.com/support/errata/RHSA-2003-200.html - http://download.immunix.org/ImmunixOS
&m=105786446329347&w=2 - http://www.redhat.com/support/errata/RHSA-2003-200.html - http://download.immunix.org/ImmunixOS/7+/Updates/errata/IMNX-2003-7+-017-01 - http://www.debian.org/security/2003/dsa-344
CVE ID: CVE-2003-0283 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject arbitrary web script and HTML tags via a message with a "<<" before a tag name in the (1) subject, (2) author's name, or (3) author's e-mail. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11974 - http://marc.info/?l=bugtraq&m=105251421925394&w=2 - http://www.securityfocus.com/bid/7545 - http://marc.info/?l=bugtraq&m=105251043821533&w=2
CVE ID: CVE-2003-0284 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the Plug-ins folder that spread to other PDF documents, as demonstrated by the W32.Yourde virus. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/184820 - http://www.adobe.com/support/downloads/detail.jsp?ftpID=2121
CVE ID: CVE-2003-0285 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM AIX 5.2 and earlier distributes Sendmail with a configuration file (sendmail.cf) with the (1) promiscuous_relay, (2) accept_unresolvable_domains, and (3) accept_unqualified_senders features enabled, which allows Sendmail to be used as an open mail relay for sending spam e-mail. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11993 - http://marc.info/?l=bugtraq&m=105284689228961&w=2 - http://www.securityfocus.com/bid/7580 - http://security.sdsc.edu/adviso
p://marc.info/?l=bugtraq&m=105284689228961&w=2 - http://www.securityfocus.com/bid/7580 - http://security.sdsc.edu/advisories/2003.05.13-AIX-sendmail.txt - http://www.kb.cert.org/vuls/id/814617
CVE ID: CVE-2003-0286 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11981 - http://packetstormsecurity.org/0305-exploits/snitz_exec.txt - http://marc.info/?l=bugtraq&m=105277599131134&w=2 - http://secunia.com/advisories/35733 - http://archives.neohapsis.com/archives/vulnwatch/2003-
raq&m=105277599131134&w=2 - http://secunia.com/advisories/35733 - http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0067.html - http://osvdb.org/56166 - http://www.securityfocus.com/bid/35764 - http://www.securityfocus.com/bid/7549
CVE ID: CVE-2003-0287 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via the Name textbox, possibly when the "Allow HTML in comments?" option is enabled. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105284589927655&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12003 - http://marc.info/?l=bugtraq&m=105277690132079&w=2 - http://www.securityfocus.com/bid/7560 - h
om/vulnerabilities/12003 - http://marc.info/?l=bugtraq&m=105277690132079&w=2 - http://www.securityfocus.com/bid/7560 - http://marc.info/?l=bugtraq&m=105276879622636&w=2
CVE ID: CVE-2003-0288 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.lac.co.jp/security/english/snsadv_e/64_e.html - http://marc.info/?l=bugtraq&m=105283843417610&w=2 - http://www.securityfocus.com/bid/7566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11986
CVE ID: CVE-2003-0289 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter. Additional Analyst Notes: - CVE Program Container: References: - http://forums.gentoo.org/viewtopic.php?t=54904 - http://www.securityfocus.com/bid/7565 - ftp://ftp.berlios.de/pub/cdrecord/alpha/cdrtools-2.01a14.tar.gz - http://www.securiteam.com/exploits/5ZP0C2AAAC.html - http://marc.info/?l=bugtraq&m=105285564307225&w=2 - http://www.mandriva.com/security/adv
.com/exploits/5ZP0C2AAAC.html - http://marc.info/?l=bugtraq&m=105285564307225&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:058 - http://marc.info/?l=bugtraq&m=105286031812533&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12007
CVE ID: CVE-2003-0290 State: PUBLISHED Published: 2003-05-14T04:00:00 Last Updated: 2024-08-08T01:50:47.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in eServ 2.9x allows remote attackers to cause a denial of service (memory exhaustion) via a large number of connections, whose memory is not freed when the connection is terminated. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11973 - http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0064.html - http://www.securityfocus.com/bid/7552 - http://marc.info/?l=bugtraq&m=105284631428187&w=2 - http://marc.info/?l=bugtraq&m=105284630228137&w=2
CVE ID: CVE-2003-0291 State: PUBLISHED Published: 2003-05-15T04:00:00 Last Updated: 2024-08-08T01:50:47.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: 3com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP responses, which allows remote attackers to identify the contents of previous HTTP requests by sniffing DHCP packets. Additional Analyst Notes: - CVE Program Container: References: - http://nautopia.coolfreepages.com/vulnerabilidades/3com812_dhcp_leak.htm - http://marc.info/?l=bugtraq&m=105301488426951&w=2 - http://www.securityfocus.com/bid/7592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11999 - http://marc.info/?l=bugtraq&m=10
curityfocus.com/bid/7592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11999 - http://marc.info/?l=bugtraq&m=105292451702516&w=2
CVE ID: CVE-2003-0292 State: PUBLISHED Published: 2003-05-15T04:00:00 Last Updated: 2024-08-08T01:50:47.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Inktomi Traffic-Server 5.5.1 allows remote attackers to insert arbitrary web script or HTML into an error page that appears to come from the domain that the client is visiting, aka "Man-in-the-Middle" XSS. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105292750807005&w=2 - http://www.securityfocus.com/bid/7596
CVE ID: CVE-2003-0293 State: PUBLISHED Published: 2003-05-15T04:00:00 Last Updated: 2024-08-08T01:50:47.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: PalmOS allows remote attackers to cause a denial of service (CPU consumption) via a flood of ICMP echo request (ping) packets. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105293128612131&w=2
CVE ID: CVE-2003-0294 State: PUBLISHED Published: 2003-05-15T04:00:00 Last Updated: 2024-08-08T01:50:47.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: autohtml.php in php-proxima 6.0 and earlier allows remote attackers to read arbitrary files via the name parameter in a modload operation. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105293834421549&w=2
CVE ID: CVE-2003-0295 State: PUBLISHED Published: 2003-05-15T04:00:00 Last Updated: 2024-08-08T01:50:47.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capability. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105293890422210&w=2 - http://marc.info/?l=bugtraq&m=105292832607981&w=2
CVE ID: CVE-2003-0296 State: PUBLISHED Published: 2003-05-15T04:00:00 Last Updated: 2024-08-08T01:50:47.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105294024124163&w=2
CVE ID: CVE-2003-0297 State: PUBLISHED Published: 2003-05-15T04:00:00 Last Updated: 2024-08-08T01:50:47.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/430302/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2005-114.html - http://www.redhat.com/support/errata/RHSA-2005-
0/0/threaded - http://www.redhat.com/support/errata/RHSA-2005-114.html - http://www.redhat.com/support/errata/RHSA-2005-015.html - http://marc.info/?l=bugtraq&m=105294024124163&w=2
CVE ID: CVE-2003-0298 State: PUBLISHED Published: 2003-05-15T04:00:00 Last Updated: 2024-08-08T01:50:47.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large (1) literal and possibly (2) mailbox size values that cause either integer signedness errors or integer overflow errors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105294024124163&w=2
CVE ID: CVE-2003-0299 State: PUBLISHED Published: 2003-05-15T04:00:00 Last Updated: 2024-08-08T01:50:47.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large mailbox size values that cause either integer signedness errors or integer overflow errors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105294024124163&w=2
CVE ID: CVE-2003-0300 State: PUBLISHED Published: 2003-05-15T04:00:00 Last Updated: 2024-08-08T01:50:47.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105294024124163&w=2
CVE ID: CVE-2003-0301 State: PUBLISHED Published: 2003-05-15T04:00:00 Last Updated: 2024-08-08T01:50:47.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP Client for Outlook Express 6.00.2800.1106 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105294024124163&w=2
CVE ID: CVE-2003-0302 State: PUBLISHED Published: 2003-05-15T04:00:00 Last Updated: 2024-08-08T01:50:47.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105294024124163&w=2
CVE ID: CVE-2003-0303 State: PUBLISHED Published: 2003-05-17T04:00:00 Last Updated: 2024-08-08T01:50:47.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7609 - http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0070.html - http://marc.info/?l=bugtraq&m=105302025601231&w=2
CVE ID: CVE-2003-0304 State: PUBLISHED Published: 2003-05-17T04:00:00 Last Updated: 2024-08-08T01:50:47.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0070.html - http://marc.info/?l=bugtraq&m=105302025601231&w=2
CVE ID: CVE-2003-0305 State: PUBLISHED Published: 2003-05-17T04:00:00 Last Updated: 2024-08-08T01:50:47.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Service Assurance Agent (SAA) in Cisco IOS 12.0 through 12.2, aka Response Time Reporter (RTR), allows remote attackers to cause a denial of service (crash) via malformed RTR packets to port 1967. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5608 - http://www.cisco.com/warp/public/707/cisco-sa-20030515-saa.shtml