Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f83489
d594%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2003-0246 State: PUBLISHED Published: 2003-05-15T04:00:00 Last Updated: 2024-08-08T01:50:46.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-147.html - http://www.turbolinux.com/security/TLSA-2003-41.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2003:074 - http://www.debian.org/security/2003/dsa-336 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:066 - http
4 - http://www.debian.org/security/2003/dsa-336 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:066 - http://www.redhat.com/support/errata/RHSA-2003-172.html - http://marc.info/?l=bugtraq&m=105301461726555&w=2 - http://www.debian.org/security/2003/dsa-311 - http://www.debian.org/security/2003/dsa-332 - http://www.debian.org/security/2003/dsa-312 - http://www.debian.org/security/2004/dsa-442 - http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0076.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A278
CVE ID: CVE-2003-0247 State: PUBLISHED Published: 2003-06-05T04:00:00 Last Updated: 2024-08-08T01:50:47.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service ("kernel oops"). Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-187.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A284 - http://www.turbolinux.com/security/TLSA-2003-41.txt - http://www.redhat.com/support/errata/RHSA-2003-195.html - http://www.redhat.com/support/errata/RHSA-2003-198.html - http://www.mandriva.
t.com/support/errata/RHSA-2003-195.html - http://www.redhat.com/support/errata/RHSA-2003-198.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:074 - http://www.debian.org/security/2003/dsa-336 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:066 - http://www.debian.org/security/2003/dsa-311 - http://www.debian.org/security/2003/dsa-332 - http://www.debian.org/security/2003/dsa-312 - http://www.debian.org/security/2004/dsa-442
CVE ID: CVE-2003-0248 State: PUBLISHED Published: 2003-06-05T04:00:00 Last Updated: 2024-08-08T01:50:46.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-187.html - http://www.turbolinux.com/security/TLSA-2003-41.txt - http://www.redhat.com/support/errata/RHSA-2003-195.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:074 - http://www.debian.org/security/2003/dsa-336 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:066 - https://oval
://www.debian.org/security/2003/dsa-336 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:066 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A292 - http://www.debian.org/security/2003/dsa-311 - http://www.debian.org/security/2003/dsa-332 - http://www.debian.org/security/2003/dsa-312 - http://www.debian.org/security/2004/dsa-442
CVE ID: CVE-2003-0249 State: PUBLISHED Published: 2006-02-27T23:00:00Z Last Updated: 2024-09-16T23:20:36.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP treats unknown methods such as "PoSt" as a GET request, which could allow attackers to intended access restrictions if PHP is running on a server that passes on all methods, such as Apache httpd 2.0, as demonstrated using a Limit directive. NOTE: this issue has been disputed by the Apache security team, saying "It is by design that PHP allows scripts to process any request method. A script which does not explicitly verify the request method will hence be processed as normal for arbitrary methods. It is therefore expected
explicitly verify the request method will hence be processed as normal for arbitrary methods. It is therefore expected behaviour that one cannot implement per-method access control using the Apache configuration alone, which is the assumption made in this report. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=97
CVE ID: CVE-2003-0251 State: PUBLISHED Published: 2003-06-28T04:00:00 Last Updated: 2024-08-08T01:50:47.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the server, which causes ypserv to block. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8031 - http://secunia.com/advisories/21112 - http://www.redhat.com/support/errata/RHSA-2003-201.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A667 - http://www.turbolinux.com/security/TLSA-2003-43.txt - http://www
y/search/definition/oval%3Aorg.mitre.oval%3Adef%3A667 - http://www.turbolinux.com/security/TLSA-2003-43.txt - http://www.securityfocus.com/archive/1/440454/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2003:072 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55600&zone_32=category%3Asecurity - http://www.vupen.com/english/advisories/2006/2873 - http://www.redhat.com/support/errata/RHSA-2003-173.html - http://www.securityfocus.com/archive/1/440454/100/0/threaded - http://securitytracker.com/id?1016517
CVE ID: CVE-2003-0252 State: PUBLISHED Published: 2003-07-15T04:00:00 Last Updated: 2024-08-08T01:50:46.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001262.1-1 - http://www.redhat.com/support/errata/RHSA-2003-206.html - http://www.securityfocus.com/bid/8179 - http://marc.info/?l=bugtraq&m=1058390324
com/support/errata/RHSA-2003-206.html - http://www.securityfocus.com/bid/8179 - http://marc.info/?l=bugtraq&m=105839032403325&w=2 - http://isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txt - http://www.turbolinux.com/security/TLSA-2003-44.txt - http://www.redhat.com/support/errata/RHSA-2003-207.html - http://marc.info/?l=bugtraq&m=105820223707191&w=2 - http://securitytracker.com/id?1007187 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0024.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:076 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0023.html - http://marc.info/?l=bugtraq&m=105830921519513&w=2 - http://secunia.com/advisories/9259 - https://
ch/2003-q3/0023.html - http://marc.info/?l=bugtraq&m=105830921519513&w=2 - http://secunia.com/advisories/9259 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12600 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A443 - http://www.kb.cert.org/vuls/id/258564 - http://www.novell.com/linux/security/advisories/2003_031_nfs_utils.html - http://www.debian.org/security/2003/dsa-349
CVE ID: CVE-2003-0253 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:50:47.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2003:075 - http://www.redhat.com/support/errata/RHSA-2003-240.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A173 - http://marc.info/?l=bugtraq&m=105776593602600&w=2 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77f
173 - http://marc.info/?l=bugtraq&m=105776593602600&w=2 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.
.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8e
0%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2003-0254 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:50:46.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service (CPU consumption by infinite loop) when the FTP proxy server fails to create an IPv6 socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2003:075 - http://www.redhat.com/support/errata/RHSA-2003-240.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A183 - http://marc.info/?l=bugtraq&m=105776593602600&w=2 - https
pository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A183 - http://marc.info/?l=bugtraq&m=105776593602600&w=2 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce
62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.h
e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2003-0255 State: PUBLISHED Published: 2003-05-07T04:00:00 Last Updated: 2024-08-08T01:50:46.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, which prevents GnuPG from warning the encrypting user when a user ID does not have a trusted path. Additional Analyst Notes: - CVE Program Container: References: - http://www.turbolinux.com/security/TLSA-2003-34.txt - http://www.redhat.com/support/errata/RHSA-2003-175.html - http://www.osvdb.org/4947 - https://oval.cisecurity.org/repository/search/def
at.com/support/errata/RHSA-2003-175.html - http://www.osvdb.org/4947 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A135 - http://marc.info/?l=bugtraq&m=105362224514081&w=2 - http://www.securityfocus.com/bid/7497 - http://marc.info/?l=bugtraq&m=105311804129104&w=2 - http://www.linuxsecurity.com/advisories/gentoo_advisory-3266.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11930 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000694 - http://www.redhat.com/support/errata/RHSA-2003-176.html - http://www.linuxsecurity.com/advisories/engarde_advisory-3258.html - htt
.redhat.com/support/errata/RHSA-2003-176.html - http://www.linuxsecurity.com/advisories/engarde_advisory-3258.html - http://marc.info/?l=bugtraq&m=105301357425157&w=2 - http://www.kb.cert.org/vuls/id/397604 - http://marc.info/?l=bugtraq&m=105215110111174&w=2
CVE ID: CVE-2003-0256 State: PUBLISHED Published: 2003-05-09T04:00:00 Last Updated: 2024-08-08T01:50:46.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://kopete.kde.org/index.php?page=newsstory&news=Kopete_releases_version_0.6.2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000665 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:055
CVE ID: CVE-2003-0257 State: PUBLISHED Published: 2004-03-16T05:00:00 Last Updated: 2024-08-08T01:50:46.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/12000 - http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2003.0660.1
CVE ID: CVE-2003-0258 State: PUBLISHED Published: 2003-05-08T04:00:00 Last Updated: 2024-08-08T01:50:46.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/727780 - http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/11954
CVE ID: CVE-2003-0259 State: PUBLISHED Published: 2003-05-08T04:00:00 Last Updated: 2024-08-08T01:50:47.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7 allows remote attackers to cause a denial of service (reload) via a malformed SSH initialization packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11955 - http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml - http://www.kb.cert.org/vuls/id/317348
CVE ID: CVE-2003-0260 State: PUBLISHED Published: 2003-05-08T04:00:00 Last Updated: 2024-08-08T01:50:46.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service (slowdown and possibly reload) via a flood of malformed ICMP packets. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11956 - http://www.kb.cert.org/vuls/id/221164 - http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml
CVE ID: CVE-2003-0261 State: PUBLISHED Published: 2003-05-08T04:00:00Z Last Updated: 2024-09-16T23:56:29.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-302
CVE ID: CVE-2003-0262 State: PUBLISHED Published: 2003-05-08T04:00:00 Last Updated: 2024-08-08T01:50:46.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges, which KATAXWR is not designed to have. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11945 - http://www.debian.org/security/2003/dsa-299
CVE ID: CVE-2003-0263 State: PUBLISHED Published: 2003-05-08T04:00:00 Last Updated: 2024-08-08T01:50:47.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) 1.22 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7506 - http://marc.info/?l=bugtraq&m=105223471822836&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0052.html - http://www.securityfocus.com/bid/7508 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11951
CVE ID: CVE-2003-0264 State: PUBLISHED Published: 2003-05-08T04:00:00 Last Updated: 2024-08-08T01:50:47.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105232506011335&w=2 - http://marc.info/?l=ntbugtraq&m=105233360321895&w=2 - http://www.nextgenss.com/advisories/slmail-vulns.txt - http://packetstormsecurity.com/files/161526/SLMail
60321895&w=2 - http://www.nextgenss.com/advisories/slmail-vulns.txt - http://packetstormsecurity.com/files/161526/SLMail-5.1.0.4420-Remote-Code-Execution.html
CVE ID: CVE-2003-0265 State: PUBLISHED Published: 2003-05-08T04:00:00 Last Updated: 2024-08-08T01:50:47.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7421 - http://marc.info/?l=bugtraq&m=105232424810097&w=2
CVE ID: CVE-2003-0266 State: PUBLISHED Published: 2003-05-08T04:00:00 Last Updated: 2024-08-08T01:50:47.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in SLWebMail 3 on Windows systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long Language parameter to showlogin.dll, (2) a long CompanyID parameter to recman.dll, (3) a long CompanyID parameter to admin.dll, or (4) a long CompanyID parameter to globallogin.dll. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105232436210273&w=2 - http://www.nextgenss.com/advisories/slwebmail-vulns.txt - http://marc
ttp://marc.info/?l=bugtraq&m=105232436210273&w=2 - http://www.nextgenss.com/advisories/slwebmail-vulns.txt - http://marc.info/?l=ntbugtraq&m=105233363721919&w=2
CVE ID: CVE-2003-0267 State: PUBLISHED Published: 2003-05-08T04:00:00 Last Updated: 2024-08-08T01:50:47.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: ShowGodLog.dll in SLWebMail 3 on Windows systems allows remote attackers to read arbitrary files by directly calling ShowGodLog.dll with an argument specifying the full path of the target file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105232436210273&w=2 - http://www.nextgenss.com/advisories/slwebmail-vulns.txt - http://marc.info/?l=ntbugtraq&m=105233363721919&w=2
CVE ID: CVE-2003-0268 State: PUBLISHED Published: 2003-05-08T04:00:00 Last Updated: 2024-08-08T01:50:47.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105232436210273&w=2 - http://www.nextgenss.com/advisories/slwebmail-vulns.txt - http://marc.info/?l=ntbugtraq&m=105233363721919&w=2
CVE ID: CVE-2003-0269 State: PUBLISHED Published: 2003-05-08T04:00:00 Last Updated: 2024-08-08T01:50:47.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105223947528794&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11949 - http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0053.html - http://lists.grok.org.uk/pipermail/full-disclosure/2003-May/004892.html - http://www.securityfocus.com/bid/7503