Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-1220 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T02:19:46.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server proxy plugin for BEA Weblogic Express and Server 6.1 through 8.1 SP 1 allows remote attackers to cause a denial of service (proxy plugin crash) via a malformed URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9034 - http://dev2dev.bea.com/pub/advisory/25
CVE ID: CVE-2003-1221 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T02:19:46.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Express and Server 7.0 through 8.1 SP 1, under certain circumstances when a request to use T3 over SSL (t3s) is made to the insecure T3 port, may use a non-SSL connection for the communication, which could allow attackers to sniff sessions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9034 - http://dev2dev.bea.com/pub/advisory/32
CVE ID: CVE-2003-1222 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T02:19:46.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service (JMS) provider, echoes the password for the foreign provider to the console and stores it in cleartext in config.xml, which could allow attackers to obtain the password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9034 - http://dev2dev.bea.com/pub/advisory/63
CVE ID: CVE-2003-1223 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T02:19:45.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Node Manager for BEA WebLogic Express and Server 6.1 through 8.1 SP 1 allows remote attackers to cause a denial of service (Node Manager crash) via malformed data to the Node Manager's port, as demonstrated by nmap. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9034 - http://dev2dev.bea.com/pub/advisory/48
CVE ID: CVE-2003-1224 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T02:19:45.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password to the screen in cleartext, which allows attackers to read a user's password by physically observing ("shoulder surfing") the screen. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7563 - http://dev2dev.bea.com/pub/advisory/22
CVE ID: CVE-2003-1225 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T02:19:46.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7563 - http://dev2dev.bea.com/pub/advisory/22
CVE ID: CVE-2003-1226 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T02:19:45.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password encryption insecurely in config.xml, filerealm.properties, and weblogic-rar.xml, which allows local users to learn those secrets and decrypt passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7563 - http://www.securityfocus.com/bid/7587 - http://dev2dev.bea.com/pub/advisory/22
CVE ID: CVE-2003-1227 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T02:19:46.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, allows remote attackers to inject arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412. NOTE: this issue might be exploitable only during installation, or if the administrator has not run a security script after installation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabili
ation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13419 - http://www.securityfocus.com/bid/8814 - http://www.securityfocus.com/archive/1/341098 - http://www.securityfocus.com/archive/1/341094 - http://www.securityfocus.com/archive/1/341044
CVE ID: CVE-2003-1228 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T02:19:46.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via an HTTP request with a long path. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107090601705839&w=2 - http://www.securiteam.com/unixfocus/5FP0C1FCAW.html - http://secunia.com/advisories/10385/ - http://marc.info/?l=bugtraq&m=107064887507504&w=2 - http:/
ocus/5FP0C1FCAW.html - http://secunia.com/advisories/10385/ - http://marc.info/?l=bugtraq&m=107064887507504&w=2 - http://www.securityfocus.com/bid/9871 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15474
CVE ID: CVE-2003-1229 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-08T02:19:45.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and (4) Java Web Start 1.0 through 1.2 incorrectly calls the isClientTrusted method when determining server trust, which results in improper validation of digital certificate and allows remote attackers to (1) falsely authenticate peers for SSL or (2) incorrectly validate signed JAR files. Additional Analyst Notes: - CVE Program Container: References: - http
SSL or (2) incorrectly validate signed JAR files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1006001 - http://securitytracker.com/id?1007483 - http://securitytracker.com/id?1006007 - http://java.sun.com/products/jsse/CHANGES.txt - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0301-239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11182 - http://secunia.com/advisories/7943 - http://www.securityfocus.com/bid/6682 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5883 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-50081-1 - http://archives.neohapsis.com/archives/b
def%3A5883 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-50081-1 - http://archives.neohapsis.com/archives/bugtraq/2003-01/0334.html
CVE ID: CVE-2003-1230 State: PUBLISHED Published: 2005-08-17T04:00:00 Last Updated: 2024-08-08T02:19:45.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: The implementation of SYN cookies (syncookies) in FreeBSD 4.5 through 5.0-RELEASE-p3 uses only 32-bit internal keys when generating syncookies, which makes it easier for remote attackers to conduct brute force ISN guessing attacks and spoof legitimate traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/19785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11397 - http://www.securityfocus.com/bid/6920 - http://secunia.com/advisories/8142/ - http://www.securityfocus.com/advisorie
7 - http://www.securityfocus.com/bid/6920 - http://secunia.com/advisories/8142/ - http://www.securityfocus.com/advisories/5013
CVE ID: CVE-2003-1231 State: PUBLISHED Published: 2005-08-19T04:00:00 Last Updated: 2024-08-08T02:19:45.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 5.5 allows remote attackers to inject arbitrary web script or HTML via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1008522 - http://secunia.com/advisories/10458 - http://www.securiteam.com/unixfocus/6D00F2A95C.html - http://www.securityfocus.com/bid/9244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14032
CVE ID: CVE-2003-1232 State: PUBLISHED Published: 2005-09-26T04:00:00 Last Updated: 2024-08-08T02:19:45.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emacs 21.2.1 does not prompt or warn the user before executing Lisp code in the local variables section of a text file, which allows user-assisted attackers to execute arbitrary commands, as demonstrated using the mode-name variable. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/gnu.emacs.bug/browse_frm/thread/9424ec1b2fdae321/c691a2da8904db0f?hl=en&lr=&ie=UTF-8&oe=UTF-8&rnum=1&prev=/groups%3Fq%3Dguninski%2Bemacs%26hl%3Den%26lr%3D%26ie%3DUTF-8%26oe%3DUTF-8%26selm%3Dmailman.763.
-8&oe=UTF-8&rnum=1&prev=/groups%3Fq%3Dguninski%2Bemacs%26hl%3Den%26lr%3D%26ie%3DUTF-8%26oe%3DUTF-8%26selm%3Dmailman.763.1041357806.19936.bug-gnu-emacs%2540gnu.org%26rnum%3D1#c691a2da8904db0f - http://www.securityfocus.com/bid/15375 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:208 - http://secunia.com/advisories/17496 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286183 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-May/005089.html
CVE ID: CVE-2003-1233 State: PUBLISHED Published: 2005-10-28T04:00:00 Last Updated: 2024-08-08T02:19:45.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pedestal Software Integrity Protection Driver (IPD) 1.3 and earlier allows privileged attackers, such as rootkits, to bypass file access restrictions to the Windows kernel by using the NtCreateSymbolicLinkObject function to create a symbolic link to (1) \Device\PhysicalMemory or (2) to a drive letter using the subst command. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-01/0017.html - http://archives.neohapsis.com/archives/bugtraq/2003-01/0018.html - http:/
apsis.com/archives/bugtraq/2003-01/0017.html - http://archives.neohapsis.com/archives/bugtraq/2003-01/0018.html - http://www.securityfocus.com/bid/6511 - http://www.phrack.org/show.php?p=59&a=16 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10979 - http://secunia.com/advisories/7816
CVE ID: CVE-2003-1234 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T02:19:45.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via multiple calls to (1) fpathconf and (2) lseek, which do not properly decrement f_count through a call to fdrop. Additional Analyst Notes: - CVE Program Container: References: - http://www.pine.nl/press/pine-cert-20030101.txt - http://www.securityfocus.com/archive/1/305308/30/26420/threaded - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0006.html -
rityfocus.com/archive/1/305308/30/26420/threaded - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0006.html - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:44.filedesc.asc - http://archives.neohapsis.com/archives/bugtraq/2003-01/0057.html - http://www.securityfocus.com/bid/6524 - http://www.securitytracker.com/id?1005898 - http://www.iss.net/security_center/static/10993.php - http://secunia.com/advisories/7821
CVE ID: CVE-2003-1235 State: PUBLISHED Published: 2005-11-16T07:37:00Z Last Updated: 2024-09-16T16:43:10.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via a URL request for testcgi.exe, which lists the values of environment variables and the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-04/0014.html - http://www.securityfocus.com/bid/7283 - http://www.iss.net/security_center/static/11686.php
CVE ID: CVE-2003-1236 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T02:19:46.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to execute arbitrary code via format string specifiers in syslog. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6553 - http://tanne.fluxnetz.de/download/tanne-0.7.1.tar.bz2 - http://www.iss.net/security_center/static/11006.php - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0011.html - http://www.securityfocus.com/archive/1/305663 - http://www.security
neohapsis.com/archives/vulnwatch/2003-q1/0011.html - http://www.securityfocus.com/archive/1/305663 - http://www.securitytracker.com/id?1005900 - http://secunia.com/advisories/7831 - http://www.securityfocus.com/archive/1/305460
CVE ID: CVE-2003-1237 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T02:19:45.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability (XSS) in WWWBoard 2.0A2.1 and earlier allows remote attackers to inject arbitrary HTML or web script via a message post. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-02/0274.html - http://www.iss.net/security_center/static/11383.php - http://www.securityfocus.com/bid/6918
CVE ID: CVE-2003-1238 State: PUBLISHED Published: 2005-11-16T07:37:00Z Last Updated: 2024-09-16T18:28:47.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability (XSS) in Nuked-Klan 1.3 beta and earlier allows remote attackers to steal authentication information via cookies by injecting arbitrary HTML or script into op of the (1) Team, (2) News, and (3) Liens modules. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/11420.php - http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html - http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html - http://www.securityfocus.com/bid/6
003-03/0275.html - http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html - http://www.securityfocus.com/bid/6916
CVE ID: CVE-2003-1239 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T02:19:46.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in sendphoto.php in WihPhoto 0.86 allows remote attackers to read arbitrary files via .. specifiers in the album parameter, and the target filename in the pic parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0092.html - http://www.iss.net/security_center/static/11429.php - http://www.securityfocus.com/bid/6929 - http://www.securityfocus.com/archive/1/312966
CVE ID: CVE-2003-1240 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T02:19:45.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in CuteNews 0.88 allows remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter in (1) shownews.php, (2) search.php, or (3) comments.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/11417.php - http://archives.neohapsis.com/archives/bugtraq/2003-02/0320.html - http://www.securityfocus.com/bid/6935
CVE ID: CVE-2003-1241 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T02:19:45.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability (XSS) in (1) admin_index.php, (2) admin_pass.php, (3) admin_modif.php, and (4) admin_suppr.php in MyGuestbook 3.0 allows remote attackers to execute arbitrary PHP code by modifying the location parameter to reference a URL on a remote web server that contains file.php via script injected into the pseudo, email, and message parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/312762 - http://www.securityfocus.com/bid/6906 - http://
Container: References: - http://www.securityfocus.com/archive/1/312762 - http://www.securityfocus.com/bid/6906 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0089.html
CVE ID: CVE-2003-1242 State: PUBLISHED Published: 2005-11-16T07:37:00Z Last Updated: 2024-09-17T03:44:13.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent module, which returns the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/11372.php - http://archives.neohapsis.com/archives/bugtraq/2003-02/0236.html - http://www.securityfocus.com/bid/6893
CVE ID: CVE-2003-1243 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T02:19:45.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability (XSS) in Sage 1.0 b3 allows remote attackers to insert arbitrary HTML or web script via the mod parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-02/0236.html - http://www.securityfocus.com/bid/6894 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11371
CVE ID: CVE-2003-1244 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T02:19:46.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in page_header.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote attackers to brute force user passwords and possibly gain unauthorized access to forums via the forum_id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6888 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0245.html - http://www.iss.net/security_center/static/11376.php
CVE ID: CVE-2003-1245 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T02:19:46.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: index2.php in Mambo 4.0.12 allows remote attackers to gain administrator access via a URL request where session_id is set to the MD5 hash of a session cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11398 - http://archives.neohapsis.com/archives/bugtraq/2003-02/0302.html - http://www.securityfocus.com/bid/6926
CVE ID: CVE-2003-1246 State: PUBLISHED Published: 2005-11-16T07:37:00Z Last Updated: 2024-09-17T01:01:07.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver (IPD) 1.2 and 1.3 allows local users to create and overwrite arbitrary files via a symlink attack on \winnt\system32\drivers using the subst command. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10979.php - http://archives.neohapsis.com/archives/bugtraq/2003-01/0017.html - http://archives.neohapsis.com/archives/bugtraq/2003-01/0018.html - http://www.securityfocus.com/bid/6511
CVE ID: CVE-2003-1247 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T02:19:46.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL content type in CGI::readFile, (2) a long path in diskusage, and (3) a long fname in flist. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1005893 - http://www.securityfocus.com/bid/6537 - http://secunia.com/advisories/7832 - http://psoft.net/misc/webshell_patch.html - http://www.securityfocus.com/bid/6540 - http://www.iss.net/security_center/static/10999.php
t/misc/webshell_patch.html - http://www.securityfocus.com/bid/6540 - http://www.iss.net/security_center/static/10999.php - http://www.securityfocus.com/archive/1/305313 - http://www.securityfocus.com/bid/6527 - http://www.iss.net/security_center/static/11003.php - http://www.iss.net/security_center/static/11002.php - http://www.securityfocus.com/bid/6538
CVE ID: CVE-2003-1248 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T02:19:46.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) mode and (2) zipfile parameters in a URL request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1005893 - http://www.securityfocus.com/bid/6539 - http://www.securityfocus.com/bid/6537 - http://psoft.net/misc/webshell_patch.html - http://www.iss.net/security_center/static/11001.php - http://www.securityfocus.com/archive/1/305313
CVE ID: CVE-2003-1249 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T02:19:46.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/7846 - http://www.iss.net/security_center/static/11026.php - http://www.securitytracker.com/id?1005906 - http://www.securityfocus.com/bid/6569 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0014.html - http://www.securityfocus.com/archive/1/305991
CVE ID: CVE-2003-1250 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T02:19:45.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Efficient Networks 5861 DSL router, when running firmware 5.3.80 configured to block incoming TCP SYN, packets allows remote attackers to cause a denial of service (crash) via a flood of TCP SYN packets to the WAN interface using a port scanner such as nmap. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/308008 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0015.html - http://www.securityfocus.com/bid/6573 - http://www.securitytracker.com/id?1005910 - http://
ulnwatch/2003-q1/0015.html - http://www.securityfocus.com/bid/6573 - http://www.securitytracker.com/id?1005910 - http://www.iss.net/security_center/static/11032.php - http://securitytracker.com/id?1005980 - http://www.securityfocus.com/archive/1/306081
CVE ID: CVE-2003-1251 State: PUBLISHED Published: 2005-11-16T07:37:00 Last Updated: 2024-08-08T02:19:45.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) menu.inc.php, (2) datasets.php and (3) mass_operations.inc.php (mistakenly referred to as mass_opeations.inc.php) scripts in N/X 2002 allow remote attackers to execute arbitrary PHP code via a c_path that references a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10969.php - http://archives.neohapsis.com/archives/bugtraq/2003-01/0005.html - http://www.securityfocus.com/bid/6500 - http://secunia.com/advisories
neohapsis.com/archives/bugtraq/2003-01/0005.html - http://www.securityfocus.com/bid/6500 - http://secunia.com/advisories/7808