Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-0903 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:05:12.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9407 - http://www.kb.cert.org/vuls/id/139150 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A553 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-003 - https://oval.cise
oval%3Adef%3A553 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-003 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A751 - http://www.osvdb.org/3457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14187 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A525 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A775
CVE ID: CVE-2003-0904 State: PUBLISHED Published: 2004-01-08T05:00:00 Last Updated: 2024-08-08T02:05:12.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9409 - http://www.kb.cert.org/vuls/id/530660 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg
m/bid/9409 - http://www.kb.cert.org/vuls/id/530660 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A477 - http://www.securityfocus.com/bid/9118 - http://secunia.com/advisories/10615 - http://www.microsoft.com/exchange/support/e2k3owa.asp - https://exchange.xforce.ibmcloud.com/vulnerabilities/13869 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-002 - http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0311&L=ntbugtraq&F=P&S=&P=9281
CVE ID: CVE-2003-0905 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:12:34.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remote attackers to cause a denial of service (disallowing new connections) via a certain sequence of TCP/IP packets. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15038 - http://www.kb.cert.org/vuls/id/982630 - http://www.securityfocus.com/bid/9825 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mit
982630 - http://www.securityfocus.com/bid/9825 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A842 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-008
CVE ID: CVE-2003-0906 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T02:12:34.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code via a malformed WMF or EMF image. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A897 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 - http://www.us-cert.gov/cas/tec
897 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 - http://www.us-cert.gov/cas/techalerts/TA04-104A.html - http://www.securityfocus.com/bid/10120 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A959 - http://www.kb.cert.org/vuls/id/547028 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1064
CVE ID: CVE-2003-0907 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T02:12:34.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/o-114.shtml - http://www.kb.cert.org/vuls/id/260588 - http://www.securityfocus.com/bid/10119 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3A
tp://www.securityfocus.com/bid/10119 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1000 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A904 - http://www.us-cert.gov/cas/techalerts/TA04-104A.html - http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020065.html - http://marc.info/?l=bugtraq&m=108196864221676&w=2 - http://www.idefense.com/application/poi/display?id=100&type=vulnerabilities - https://exchange.xforce.ibmcloud.com/vulnerabilities/15704
CVE ID: CVE-2003-0908 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T02:12:34.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using the File Open dialog in the Help window, a different vulnerability than CVE-2004-0213. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10124 - http://www.ciac.org/ciac/bulletins/o-114.shtml - https://exch
er: References: - http://www.securityfocus.com/bid/10124 - http://www.ciac.org/ciac/bulletins/o-114.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/15632 - http://www.appsecinc.com/resources/alerts/general/04-0001.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 - http://www.kb.cert.org/vuls/id/526084 - http://www.us-cert.gov/cas/techalerts/TA04-104A.html - http://www.securiteam.com/windowsntfocus/5LP0C2ACKU.html - http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0082.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1046
CVE ID: CVE-2003-0909 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T02:12:34.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe command-line tool or the Task Scheduler service, aka "Windows Management Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/o-114.shtml - http://www.securityfocus.com/bid/10125 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15678 - http://www.kb.cert.org/vuls/id/206468 - https://docs.microsoft.com/en-us/security-updat
loud.com/vulnerabilities/15678 - http://www.kb.cert.org/vuls/id/206468 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 - http://www.us-cert.gov/cas/techalerts/TA04-104A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1004
CVE ID: CVE-2003-0910 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T02:12:34.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020068.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A911 -
re/2004-April/020068.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A911 - http://www.ciac.org/ciac/bulletins/o-114.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A890 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 - http://www.eeye.com/html/Research/Advisories/AD20040413D.html - http://www.us-cert.gov/cas/techalerts/TA04-104A.html - http://www.securityfocus.com/bid/10122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15707 - http://www.kb.cert.org/vuls/id/122076
CVE ID: CVE-2003-0913 State: PUBLISHED Published: 2003-11-06T05:00:00 Last Updated: 2024-08-08T02:12:34.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the Terminal application for Mac OS X 10.3 (Client and Server) may allow "unauthorized access." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13620 - http://docs.info.apple.com/article.html?artnum=120269 - http://lists.apple.com/mhonarc/security-announce/msg00040.html - http://docs.info.apple.com/article.html?artnum=61798 - http://www.securityfocus.com/bid/8979
CVE ID: CVE-2003-0914 State: PUBLISHED Published: 2003-12-02T05:00:00 Last Updated: 2024-08-08T02:12:34.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57434 - ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-003.0/CSSA-2004-003.0.txt - ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.33/CSSA-2003-SCO.33.txt - http://www.trustix.org/errata/misc/20
t - ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.33/CSSA-2003-SCO.33.txt - http://www.trustix.org/errata/misc/2003/TSL-2003-0044-bind.asc.txt - http://www.kb.cert.org/vuls/id/734644 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2011 - http://www.debian.org/security/2004/dsa-409 - http://secunia.com/advisories/10542
CVE ID: CVE-2003-0917 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0918 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0919 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0920 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0921 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0922 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0923 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0924 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:12:34.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:011 - http://www.kb.cert.org/vuls/id/487102 - http://www.redhat.com/support/errata/RHSA-2004-031.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A804 - http://www
-2004-031.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A804 - http://www.debian.org/security/2004/dsa-426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14874 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A810 - http://www.gentoo.org/security/en/glsa/glsa-200410-02.xml - http://www.securityfocus.com/bid/9442 - http://www.redhat.com/support/errata/RHSA-2004-030.html
CVE ID: CVE-2003-0925 State: PUBLISHED Published: 2003-11-06T05:00:00 Last Updated: 2024-08-08T02:12:34.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed GTP MSISDN string. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-323.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000780 - http://www.ethereal.com/appnotes/enpa-sa-00011.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:114 - http://www.securityfocus.com/bid/8951 - http://secu
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:114 - http://www.securityfocus.com/bid/8951 - http://secunia.com/advisories/10531 - http://www.debian.org/security/2003/dsa-407 - http://www.turbolinux.com/security/TLSA-2003-64.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9692 - http://www.redhat.com/support/errata/RHSA-2003-324.html
CVE ID: CVE-2003-0926 State: PUBLISHED Published: 2003-11-06T05:00:00 Last Updated: 2024-08-08T02:12:34.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ethereal 0.9.15 and earlier, and Tethereal, allows remote attackers to cause a denial of service (crash) via certain malformed (1) ISAKMP or (2) MEGACO packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-323.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000780 - http://www.ethereal.com/appnotes/enpa-sa-00011.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:114 - http://www.securityfocus.com/bid/8951 - http://secunia.com/ad
www.mandriva.com/security/advisories?name=MDKSA-2003:114 - http://www.securityfocus.com/bid/8951 - http://secunia.com/advisories/10531 - http://www.debian.org/security/2003/dsa-407 - http://www.turbolinux.com/security/TLSA-2003-64.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11648 - http://www.redhat.com/support/errata/RHSA-2003-324.html
CVE ID: CVE-2003-0927 State: PUBLISHED Published: 2003-11-06T05:00:00 Last Updated: 2024-08-08T02:12:34.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SOCKS dissector. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-323.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000780 - http://www.ethereal.com/appnotes/enpa-sa-00011.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:114 - http://www.securityfocus.com/bid/8951 - ht
0011.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:114 - http://www.securityfocus.com/bid/8951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13578 - http://secunia.com/advisories/10531 - http://www.debian.org/security/2003/dsa-407 - http://www.turbolinux.com/security/TLSA-2003-64.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9691 - http://www.redhat.com/support/errata/RHSA-2003-324.html
CVE ID: CVE-2003-0928 State: PUBLISHED Published: 2004-08-18T04:00:00 Last Updated: 2024-08-08T02:12:34.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clearswift MAILsweeper before 4.3.15 does not properly detect and filter RAR 3.20 encoded files, which allows remote attackers to bypass intended policy. Additional Analyst Notes: - CVE Program Container: References: - http://www.corsaire.com/advisories/c030807-001.txt - http://marc.info/?l=bugtraq&m=109241692108678&w=2
CVE ID: CVE-2003-0929 State: PUBLISHED Published: 2004-08-18T04:00:00 Last Updated: 2024-08-08T02:12:34.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy. Additional Analyst Notes: - CVE Program Container: References: - http://www.corsaire.com/advisories/c030807-001.txt - http://marc.info/?l=bugtraq&m=109241692108678&w=2
CVE ID: CVE-2003-0930 State: PUBLISHED Published: 2004-08-18T04:00:00 Last Updated: 2024-08-08T02:12:34.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded files, which allows remote attackers to bypass intended policy. Additional Analyst Notes: - CVE Program Container: References: - http://www.corsaire.com/advisories/c030807-001.txt - http://marc.info/?l=bugtraq&m=109241692108678&w=2
CVE ID: CVE-2003-0931 State: PUBLISHED Published: 2004-08-18T04:00:00 Last Updated: 2024-08-08T02:12:34.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sygate Enforcer 4.0 earlier allows remote attackers to cause a denial of service (service hang) by replaying a malformed discovery packet to UDP port 39999. Additional Analyst Notes: - CVE Program Container: References: - http://www.corsaire.com/advisories/c031120-001.txt - http://marc.info/?l=bugtraq&m=109215951022437&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16949
CVE ID: CVE-2003-0932 State: PUBLISHED Published: 2003-11-18T05:00:00Z Last Updated: 2024-09-16T19:15:22.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in omega-rpg 0.90 allows local users to execute arbitrary code via a long (1) command line or (2) environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-400
CVE ID: CVE-2003-0933 State: PUBLISHED Published: 2003-11-12T05:00:00Z Last Updated: 2024-09-16T18:14:24.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in conquest 7.2 and earlier may allow a local user to execute arbitrary code via a long environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-398
CVE ID: CVE-2003-0934 State: PUBLISHED Published: 2003-11-12T05:00:00 Last Updated: 2024-08-08T02:12:34.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symbol Access Portable Data Terminal (PDT) 8100 does not hide the default WEP keys if they are not changed, which could allow attackers to retrieve the keys and gain access to the wireless network. Additional Analyst Notes: - CVE Program Container: References: - http://www.secnap.net/security/031106.html - http://marc.info/?l=bugtraq&m=106850011513880&w=2
CVE ID: CVE-2003-0935 State: PUBLISHED Published: 2003-11-12T05:00:00 Last Updated: 2024-08-08T02:12:34.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-023.html - http://www.redhat.com/support/errata/RHSA-2003-335.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9802 - http://sourceforge.net/forum/forum.php?forum_id=308015 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
rceforge.net/forum/forum.php?forum_id=308015 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A869 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000778
CVE ID: CVE-2003-0936 State: PUBLISHED Published: 2003-11-18T05:00:00 Last Updated: 2024-08-08T02:12:34.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe. Additional Analyst Notes: - CVE Program Container: References: - http://securityresponse.symantec.com/avcenter/security/Content/2003.11.13.html - http://marc.info/?l=bugtraq&m=106876107330752&w=2 - http://marc.info/?l=bugtraq&m=106875764826251&w=2
CVE ID: CVE-2003-0937 State: PUBLISHED Published: 2003-11-18T05:00:00 Last Updated: 2024-08-08T02:12:35.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PID) by obtaining a procfs file descriptor for the file and calling execve() on a setuid or setgid program, which leaves the descriptor open to the user. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.32/CSSA-2003-SCO.32.txt - http://marc.info/?l=bugtraq&m=106865297403687&w=2 - http://www.texonet.com/advisories/TEXONET-20
/CSSA-2003-SCO.32.txt - http://marc.info/?l=bugtraq&m=106865297403687&w=2 - http://www.texonet.com/advisories/TEXONET-20031024.txt
CVE ID: CVE-2003-0938 State: PUBLISHED Published: 2003-11-21T05:00:00 Last Updated: 2024-08-08T02:12:35.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: vos24u.c in SAP database server (SAP DB) 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLAT stored procedure. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a111703-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/13765
CVE ID: CVE-2003-0939 State: PUBLISHED Published: 2003-11-21T05:00:00 Last Updated: 2024-08-08T02:12:34.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: eo420_GetStringFromVarPart in veo420.c for SAP database server (SAP DB) 7.4.03.27 and earlier may allow remote attackers to execute arbitrary code via a connect packet with a 256 byte segment to the niserver (aka serv.exe) process on TCP port 7269, which prevents the server from NULL terminating the string and leads to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a111703-1.txt - http://www.sapdb.org/7.4/new_relinfo.txt
CVE ID: CVE-2003-0940 State: PUBLISHED Published: 2003-11-21T05:00:00Z Last Updated: 2024-09-16T16:48:28.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a111703-2.txt