Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-0776 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-278.html - ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt - http://www.novell.com/linux/security/advisories/2003_046_sane.html - http://www.redhat.com/support/errata/RHSA-2003-285.html - http://www.securityfocus.c
ity/advisories/2003_046_sane.html - http://www.redhat.com/support/errata/RHSA-2003-285.html - http://www.securityfocus.com/bid/8593 - http://www.debian.org/security/2003/dsa-379 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:099
CVE ID: CVE-2003-0777 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service (segmentation fault). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8597 - http://www.redhat.com/support/errata/RHSA-2003-278.html - ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt - http://www.novell.com/linux/security/advisories/2003
pdates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt - http://www.novell.com/linux/security/advisories/2003_046_sane.html - http://www.redhat.com/support/errata/RHSA-2003-285.html - http://www.securityfocus.com/bid/8593 - http://www.debian.org/security/2003/dsa-379 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:099
CVE ID: CVE-2003-0778 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow attackers to cause a denial of service (memory consumption). Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-278.html - ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt - http://www.novell.com/linux/security/advisories/2003_046_sane.html - http://www.redhat.com/support/errata/RHSA-2003-
t - http://www.novell.com/linux/security/advisories/2003_046_sane.html - http://www.redhat.com/support/errata/RHSA-2003-285.html - http://www.securityfocus.com/bid/8593 - http://www.securityfocus.com/bid/8596 - http://www.debian.org/security/2003/dsa-379 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:099
CVE ID: CVE-2003-0779 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a091103-1.txt
CVE ID: CVE-2003-0780 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:12.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000743 - http://www.redhat.com/support/errata/RHSA-2003-282.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:094 - http://marc.info/?l=bugtraq&m=106364207129993&w=2 - http://lists.grok.org.uk/p
security/advisories?name=MDKSA-2003:094 - http://marc.info/?l=bugtraq&m=106364207129993&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009819.html - http://www.debian.org/security/2003/dsa-381 - http://www.kb.cert.org/vuls/id/516492 - http://www.redhat.com/support/errata/RHSA-2003-281.html - http://www.securityfocus.com/archive/1/337012 - http://secunia.com/advisories/9709 - http://marc.info/?l=bugtraq&m=106381424420775&w=2
CVE ID: CVE-2003-0781 State: PUBLISHED Published: 2004-03-25T05:00:00 Last Updated: 2024-08-08T02:05:12.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in ecartis before 1.0.0 does not properly validate user input, which allows attackers to obtain mailing list passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-467 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12929
CVE ID: CVE-2003-0782 State: PUBLISHED Published: 2004-03-25T05:00:00 Last Updated: 2024-08-08T02:05:12.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in ecartis before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-467 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12928
CVE ID: CVE-2003-0783 State: PUBLISHED Published: 2003-09-23T04:00:00 Last Updated: 2024-08-08T02:05:12.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in hztty 2.0 allow local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1007757 - http://securitytracker.com/id?1007756 - http://www.securityfocus.com/bid/8656 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13243 - http://www.osvdb.org/7119 - http://secunia.com/advisories/9792 - http://www.debian.org/security/2003/dsa-385 - http://marc.info/?l=bugtraq&m=106424495804417&w=2
CVE ID: CVE-2003-0784 State: PUBLISHED Published: 2003-09-23T04:00:00Z Last Updated: 2024-09-17T01:25:39.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that contains format string specifiers. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=IY47764&apar=only
CVE ID: CVE-2003-0785 State: PUBLISHED Published: 2003-09-23T04:00:00Z Last Updated: 2024-09-17T03:38:23.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: ipmasq before 3.5.12, in certain configurations, may forward packets to the external interface even if the packets are not associated with an established connection, which could allow remote attackers to bypass intended filtering. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-389
CVE ID: CVE-2003-0786 State: PUBLISHED Published: 2003-09-25T04:00:00 Last Updated: 2024-08-08T02:05:12.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.openssh.com/txt/sshpam.adv - http://www.securityfocus.com/bid/8677 - http://www.securityfocus.com/archive/1/338617 - http://www.securityfocus.com/archive/1/338616 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-September
8617 - http://www.securityfocus.com/archive/1/338616 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010812.html - http://www.kb.cert.org/vuls/id/602204
CVE ID: CVE-2003-0787 State: PUBLISHED Published: 2003-09-25T04:00:00 Last Updated: 2024-08-08T02:05:12.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.openssh.com/txt/sshpam.adv - http://www.securityfocus.com/bid/8677 - http://www.kb.cert.org/vuls/id/209807 - http://www.securityfocus.com/archive/1/338617 - http://www.securityfocus.com/archive/1/338616 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-Sept
/1/338617 - http://www.securityfocus.com/archive/1/338616 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010812.html
CVE ID: CVE-2003-0788 State: PUBLISHED Published: 2003-11-06T05:00:00 Last Updated: 2024-08-08T02:05:12.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the Internet Printing Protocol (IPP) implementation in CUPS before 1.1.19 allows remote attackers to cause a denial of service (CPU consumption from a "busy loop") via certain inputs to the IPP port (TCP 631). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8952 - http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000788 - http://www.turbolinux.com/security/TLSA-2003-63.txt - http://www.redhat.com/support/errata/RHSA-2003-275.html - http
8 - http://www.turbolinux.com/security/TLSA-2003-63.txt - http://www.redhat.com/support/errata/RHSA-2003-275.html - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:104 - http://secunia.com/advisories/10123 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=97958 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13584
CVE ID: CVE-2003-0789 State: PUBLISHED Published: 2003-10-30T05:00:00 Last Updated: 2024-08-08T02:05:12.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could cause Apache to send the output of a CGI program to the wrong client. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13552 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:103 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000775 - http://lists.apple.com/mhonarc/security-announce/msg00045.html - http://
tiva.com.br/atualizacoes/?id=a&anuncio=000775 - http://lists.apple.com/mhonarc/security-announce/msg00045.html - http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html - http://security.gentoo.org/glsa/glsa-200310-04.xml - http://www.securityfocus.com/bid/9504 - http://www.securityfocus.com/advisories/6079 - http://www.securityfocus.com/bid/8926 - http://www.redhat.com/support/errata/RHSA-2003-320.html - http://www.ciac.org/ciac/bulletins/o-015.shtml - http://marc.info/?l=bugtraq&m=106761802305141&w=2 - http://docs.info.apple.com/article.html?artnum=61798 - http://apache.secsup.org/dist/httpd/Announcement2.html - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77
- http://apache.secsup.org/dist/httpd/Announcement2.html - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists
e.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8
40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2003-0790 State: REJECTED Published: 2003-10-25T04:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2003-0791 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T02:05:12.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2004:021 - http://www.osvdb.org/8390 - http://secunia.com/advisories/11103/ - http://www.securityfocus.com/bid/9322 - https://bugzilla.mozilla.org/show_bug.cgi?id=221526 - http
m/advisories/11103/ - http://www.securityfocus.com/bid/9322 - https://bugzilla.mozilla.org/show_bug.cgi?id=221526 - http://www.securityfocus.com/advisories/6979
CVE ID: CVE-2003-0792 State: PUBLISHED Published: 2003-10-21T04:00:00 Last Updated: 2024-08-08T02:05:12.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fetchmail 6.2.4 and earlier does not properly allocate memory for long lines, which allows remote attackers to cause a denial of service (crash) via a certain email. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-004.0/CSSA-2004-004.0.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/13450 - http://www.securityfocus.com/advisories/5987 - http://www.securityfocus.com/bid/8843 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:10
advisories/5987 - http://www.securityfocus.com/bid/8843 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:101 - http://security.gentoo.org/glsa/glsa-200403-10.xml - http://www.turbolinux.com/security/TLSA-2003-61.txt - http://marc.info/?l=bugtraq&m=107731542827401&w=2
CVE ID: CVE-2003-0793 State: PUBLISHED Published: 2003-10-21T04:00:00 Last Updated: 2024-08-08T02:05:12.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not restrict the size of input, which allows attackers to cause a denial of service (memory consumption). Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2003:100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13447 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000766 - http://www.securityfocus.com/bid/8846 - http://cvs.gnome.org/bonsai/cvsblame.cgi?file=gdm2/NEWS&rev=&root=
ncio=000766 - http://www.securityfocus.com/bid/8846 - http://cvs.gnome.org/bonsai/cvsblame.cgi?file=gdm2/NEWS&rev=&root=/cvs/gnome
CVE ID: CVE-2003-0794 State: PUBLISHED Published: 2003-10-21T04:00:00 Last Updated: 2024-08-08T02:05:12.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not limit the number or duration of commands and uses a blocking socket connection, which allows attackers to cause a denial of service (resource exhaustion) by sending commands and not reading the results. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13448 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:100 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000766 - http:
a.com/security/advisories?name=MDKSA-2003:100 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000766 - http://www.securityfocus.com/bid/8846 - http://cvs.gnome.org/bonsai/cvsblame.cgi?file=gdm2/NEWS&rev=&root=/cvs/gnome
CVE ID: CVE-2003-0795 State: PUBLISHED Published: 2003-11-18T05:00:00 Last Updated: 2024-08-08T02:05:12.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) via a malformed telnet command to the telnet CLI port, which may trigger a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-305.html - http://marc.info/?l=bugtraq&m=106883387304266&w=2 - http://www.debian.org/security/2004/dsa-415 -
a/RHSA-2003-305.html - http://marc.info/?l=bugtraq&m=106883387304266&w=2 - http://www.debian.org/security/2004/dsa-415 - http://secunia.com/advisories/10563 - http://www.redhat.com/support/errata/RHSA-2003-307.html
CVE ID: CVE-2003-0796 State: PUBLISHED Published: 2004-03-10T05:00:00 Last Updated: 2024-08-08T02:05:12.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through 6.5.22 allows remote attackers to mount from unprivileged ports even with the -n option disabled. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20031102-01-P.asc - ftp://patches.sgi.com/support/free/security/advisories/20031102-02-P.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/13807 - http://www.securityfocus.com/bid/9085
CVE ID: CVE-2003-0797 State: PUBLISHED Published: 2004-03-10T05:00:00 Last Updated: 2024-08-08T02:05:12.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in rpc.mountd in SGI IRIX 6.5 through 6.5.22 allows remote attackers to cause a denial of service (process death) via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9084 - ftp://patches.sgi.com/support/free/security/advisories/20031102-01-P.asc - ftp://patches.sgi.com/support/free/security/advisories/20031102-02-P.asc - http://www.osvdb.org/8520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13808
CVE ID: CVE-2003-0798 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0799 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0800 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0801 State: PUBLISHED Published: 2003-09-18T04:00:00Z Last Updated: 2024-09-16T17:54:50.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute arbitrary web script and steal cookies via a URL to the docs/ directory that contains the script. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a091503-1.txt
CVE ID: CVE-2003-0802 State: PUBLISHED Published: 2003-09-18T04:00:00Z Last Updated: 2024-09-17T03:43:14.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root, and the physical path of the NED server, via a "retrieve" action with a location parameter of . (dot). Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a091503-1.txt
CVE ID: CVE-2003-0803 State: PUBLISHED Published: 2003-09-18T04:00:00Z Last Updated: 2024-09-17T03:18:57.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a091503-1.txt
CVE ID: CVE-2003-0804 State: PUBLISHED Published: 2003-09-25T04:00:00 Last Updated: 2024-08-08T02:05:12.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20040502-01-P.asc - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:14.arp.asc - http://docs.info.apple.com/article.html?artnum=61798
CVE ID: CVE-2003-0805 State: PUBLISHED Published: 2003-09-19T04:00:00 Last Updated: 2024-08-08T02:05:12.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command, and (2) the GSisText function, which calculates the view-type. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105804485302211&w=2 - http://marc.info/?l=bugtraq&m=106123498310717&w=2 - http://www.debian.org/security/2003/dsa-387
CVE ID: CVE-2003-0806 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T02:05:12.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of a domain, allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/o-114.shtml - http://www.securityfocus.com/bid/10126 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1054 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011
n/oval%3Aorg.mitre.oval%3Adef%3A1054 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15702 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A896 - http://www.us-cert.gov/cas/techalerts/TA04-104A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A895 - http://www.kb.cert.org/vuls/id/471260