Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
eferences: - http://marc.info/?l=ntbugtraq&m=105838590030409&w=2 - http://marc.info/?l=bugtraq&m=105838862201266&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0031.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A117 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-028 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0029.html - http://marc.info/?l=bugtraq&m=105838519729525&w=2 - http://pivx.com/larholm/adv/TL006
CVE ID: CVE-2003-0528 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T01:58:11.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0715. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2003-23.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2884 - http://www.nsfocus.com/engl
ttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2884 - http://www.nsfocus.com/english/homepage/research/0306.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A127 - http://marc.info/?l=bugtraq&m=106407417011430&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3966 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2968 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0100.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-039 - http://www.kb.cert.org/vuls/id/254236
CVE ID: CVE-2003-0530 State: PUBLISHED Published: 2003-08-22T04:00:00 Last Updated: 2024-08-08T01:58:11.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the BR549.DLL ActiveX control for Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/9580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12962 - http://www.cert.org/advisories/CA-2003-22.html - http://www.kb.cert.org/vuls/id/548964 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-032 - http://www.securityfocus.com/bid/8454 - http://se
microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-032 - http://www.securityfocus.com/bid/8454 - http://securitytracker.com/id?1007538
CVE ID: CVE-2003-0531 State: PUBLISHED Published: 2003-08-22T04:00:00 Last Updated: 2024-08-08T01:58:11.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer domain using the browser cache via crafted Content-Type and Content-Disposition headers, aka the "Browser Cache Script Execution in My Computer Zone" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/9580 - http://www.cert.org/advisories/CA-2003-22.html - http://www.lac.co.jp/security/english/snsadv_e/67_e.html - https://exchange.xforce.ibmcloud.com/vulne
/CA-2003-22.html - http://www.lac.co.jp/security/english/snsadv_e/67_e.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/12961 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-032 - http://www.kb.cert.org/vuls/id/205148 - http://www.securityfocus.com/bid/8457
CVE ID: CVE-2003-0532 State: PUBLISHED Published: 2003-08-22T04:00:00 Last Updated: 2024-08-08T01:58:11.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, which could allow remote attackers to execute arbitrary code via an object tag with a data parameter to a malicious file hosted on a server that returns an unsafe Content-Type, aka the "Object Type" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/865940 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-032 - http://www.
ert.org/vuls/id/865940 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-032 - http://www.eeye.com/html/Research/Advisories/AD20030820.html - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0084.html - http://marc.info/?l=bugtraq&m=106149026621753&w=2
CVE ID: CVE-2003-0533 State: PUBLISHED Published: 2004-04-16T04:00:00 Last Updated: 2024-08-08T01:58:11.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via a packet that causes the DsRolerUpgradeDownlevelServer function to create long debug entries for the DCPROMO.LOG log file, as exploited by the Sasser worm. Additional Analyst Notes: - CVE Program Container: Referenc
r the DCPROMO.LOG log file, as exploited by the Sasser worm. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020069.html - http://www.ciac.org/ciac/bulletins/o-114.shtml - http://www.eeye.com/html/Research/Advisories/AD20040413C.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15699 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A919 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A898 - https://oval.cisecurity.org/repository/search/definiti
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A898 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A883 - http://www.us-cert.gov/cas/techalerts/TA04-104A.html - http://marc.info/?l=bugtraq&m=108325860431471&w=2 - http://www.securityfocus.com/bid/10108 - http://www.kb.cert.org/vuls/id/753212
CVE ID: CVE-2003-0535 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:58:11.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in xbl 1.0k and earlier allows local users to gain privileges via a long -display command line option. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-345 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006386.html
CVE ID: CVE-2003-0536 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:58:11.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service via .. (dot dot) sequences in the (1) template or (2) lng parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105128606513226&w=2 - http://www.debian.org/security/2003/dsa-346 - http://sourceforge.net/tracker/index.php?func=detail&aid=670222&group_id=15&atid=100015
CVE ID: CVE-2003-0537 State: PUBLISHED Published: 2003-07-10T04:00:00Z Last Updated: 2024-09-17T03:52:43.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: The liece Emacs IRC client 2.0+0.20030527 and earlier creates temporary files insecurely, which could allow local users to overwrite arbitrary files as other users. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-341
CVE ID: CVE-2003-0538 State: PUBLISHED Published: 2003-07-10T04:00:00Z Last Updated: 2024-09-16T22:16:03.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mailcap file for mozart 1.2.5 and earlier causes Oz applications to be passed to the Oz interpreter, which allows remote attackers to execute arbitrary Oz programs in a MIME-aware client program. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-342
CVE ID: CVE-2003-0539 State: PUBLISHED Published: 2003-07-10T04:00:00 Last Updated: 2024-08-08T01:58:10.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A28 - http://www.redhat.com/support/errata/RHSA-2003-242.html - http://www.debian.org/security/2003/dsa-343
CVE ID: CVE-2003-0540 State: PUBLISHED Published: 2003-08-05T04:00:00 Last Updated: 2024-08-08T01:58:10.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/
o lock up. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000717 - http://www.securityfocus.com/bid/8333 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-August/007693.html - http://www.kb.cert.org/vuls/id/895508 - http://marc.info/?l=bugtraq&m=106029188614704&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:081 - http://www.redhat.com/support/errata/RHSA-2003-251.html - http://www.debian.org/security/2003/dsa-363 - http://marc.info/?l=bugtraq&m=106001525130257&w=2 - http://www.linuxsecurity.com/advisories/engarde_advisory-3517.html - http://www.novell.com/linux/security/advisories/2003_033_
/www.linuxsecurity.com/advisories/engarde_advisory-3517.html - http://www.novell.com/linux/security/advisories/2003_033_postfix.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A544 - http://secunia.com/advisories/9433
CVE ID: CVE-2003-0541 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T01:58:11.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: gtkhtml before 1.1.10, as used in Evolution, allows remote attackers to cause a denial of service (crash) via a malformed message that causes a null pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2003:093 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000737 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A148 - http://www.debian.org/security/2005/dsa-710 - http://www.redhat.com/sup
h/definition/oval%3Aorg.mitre.oval%3Adef%3A148 - http://www.debian.org/security/2005/dsa-710 - http://www.redhat.com/support/errata/RHSA-2003-264.html
CVE ID: CVE-2003-0542 State: PUBLISHED Published: 2003-10-30T05:00:00 Last Updated: 2024-08-08T01:58:11.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc - http://www.redhat.com/support/errata/RHSA-2004-015.html - http://secunia.com/advisories/10112 - http://www.kb.cert.org/vuls/id/4345
redhat.com/support/errata/RHSA-2004-015.html - http://secunia.com/advisories/10112 - http://www.kb.cert.org/vuls/id/434566 - http://secunia.com/advisories/10593 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:103 - http://www.redhat.com/support/errata/RHSA-2003-360.html - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://httpd.apache.org/dist/httpd/Announcement2.html - http://lists.apple.com/mhonarc/security-announce/msg00045.html - http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.6/SCOSA-2004.6.txt - http://www.redhat.com/support/errata/RHSA-2003-405.html - https://oval.cisecurity
ixWare/SCOSA-2004.6/SCOSA-2004.6.txt - http://www.redhat.com/support/errata/RHSA-2003-405.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3799 - http://www.securityfocus.com/bid/9504 - http://www.securityfocus.com/archive/1/342674 - ftp://patches.sgi.com/support/free/security/advisories/20031203-01-U.asc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9458 - http://secunia.com/advisories/10102 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13400 - http://www.securityfocus.com/advisories/6079 - http://www.redhat.com/support/errata/RHSA-2005-816.html - http://secunia.com/advisories/10153 - http://sec
sories/6079 - http://www.redhat.com/support/errata/RHSA-2005-816.html - http://secunia.com/advisories/10153 - http://secunia.com/advisories/10098 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://secunia.com/advisories/10264 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A864 - http://secunia.com/advisories/10580 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1 - http://www.redhat.com/support/errata/RHSA-2003-320.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101444-1 - http://secunia.com/advisories/10260 - http://secunia.com/advisories/10463 - http://marc.info/?l=bugtraq&m=106761802305141&w=2 - http://ww
m/advisories/10260 - http://secunia.com/advisories/10463 - http://marc.info/?l=bugtraq&m=106761802305141&w=2 - http://www.kb.cert.org/vuls/id/549142 - http://docs.info.apple.com/article.html?artnum=61798 - http://secunia.com/advisories/10096 - http://secunia.com/advisories/10114 - http://www.securityfocus.com/bid/8911 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A863 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.htm
9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.a
org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c8077
7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2003-0543 State: PUBLISHED Published: 2003-10-01T04:00:00 Last Updated: 2024-08-08T01:58:11.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5292 - http://www.redhat.com/support/errata/RHSA-2003-292.html - http://www.kb.cert.org/vuls/id/255484 - http://www.vupen.com/english/advisories/2006/3900 - http://www.debian.org/security/2003/dsa-393 - http://www-
d/255484 - http://www.vupen.com/english/advisories/2006/3900 - http://www.debian.org/security/2003/dsa-393 - http://www-1.ibm.com/support/docview.wss?uid=swg21247112 - http://www.uniras.gov.uk/vuls/2003/006489/openssl.htm - http://www.debian.org/security/2003/dsa-394 - http://www.redhat.com/support/errata/RHSA-2003-291.html - http://www.cert.org/advisories/CA-2003-26.html - http://secunia.com/advisories/22249 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4254 - http://www.securityfocus.com/bid/8732 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201029-1 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=104893 - http://www.linuxsecuri
document.do?assetkey=1-66-201029-1 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=104893 - http://www.linuxsecurity.com/advisories/engarde_advisory-3693.html
CVE ID: CVE-2003-0544 State: PUBLISHED Published: 2003-10-01T04:00:00 Last Updated: 2024-08-08T01:58:10.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-292.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4574 - http://www.kb.cert.org/vuls/id/380864 -
cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4574 - http://www.kb.cert.org/vuls/id/380864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43041 - http://www.vupen.com/english/advisories/2006/3900 - http://www.debian.org/security/2003/dsa-393 - http://www-1.ibm.com/support/docview.wss?uid=swg21247112 - http://www.uniras.gov.uk/vuls/2003/006489/openssl.htm - http://www.debian.org/security/2003/dsa-394 - http://www.redhat.com/support/errata/RHSA-2003-291.html - http://www.cert.org/advisories/CA-2003-26.html - http://secunia.com/advisories/22249 - http://www.securityfocus.com/bid/8732 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201029-1 - http:/
249 - http://www.securityfocus.com/bid/8732 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201029-1 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=104893 - http://www.linuxsecurity.com/advisories/engarde_advisory-3693.html
CVE ID: CVE-2003-0545 State: PUBLISHED Published: 2003-10-01T04:00:00 Last Updated: 2024-08-08T01:58:11.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-292.html - http://www.vupen.com/english/advisories/2006/3900 - http://www-1.ibm.com/support/docview.wss?uid=swg21247112 - http://www.kb.cert.org/vuls/id/935264 - http://www.uniras.gov.uk/vuls/2003/006489/openssl
/docview.wss?uid=swg21247112 - http://www.kb.cert.org/vuls/id/935264 - http://www.uniras.gov.uk/vuls/2003/006489/openssl.htm - http://www.debian.org/security/2003/dsa-394 - http://www.cert.org/advisories/CA-2003-26.html - http://secunia.com/advisories/22249 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2590 - http://www.securityfocus.com/bid/8732
CVE ID: CVE-2003-0546 State: PUBLISHED Published: 2003-08-14T04:00:00 Last Updated: 2024-08-08T01:58:11.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsigned packages to be installed from the Red Hat Network, if that network is compromised. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106036724315539&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A631
CVE ID: CVE-2003-0547 State: PUBLISHED Published: 2003-08-22T04:00:00 Last Updated: 2024-08-08T01:58:11.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000729 - http://www.redhat.com/support/errata/RHSA-2003-258.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A112 - http://mail.gnome.org/archives/gnome-hackers/2003-August/msg00045.html - http://marc
oval%3Aorg.mitre.oval%3Adef%3A112 - http://mail.gnome.org/archives/gnome-hackers/2003-August/msg00045.html - http://marc.info/?l=bugtraq&m=106194792924122&w=2
CVE ID: CVE-2003-0548 State: PUBLISHED Published: 2003-08-22T04:00:00 Last Updated: 2024-08-08T01:58:10.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) when a chosen host expires, a different issue than CVE-2003-0549. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000729 - http://www.redhat.com/support/errata/RHSA-2003-258.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A113 - http://www.redhat.com/support/errata/RHSA-20
curity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A113 - http://www.redhat.com/support/errata/RHSA-2003-259.html - http://mail.gnome.org/archives/gnome-hackers/2003-August/msg00045.html
CVE ID: CVE-2003-0549 State: PUBLISHED Published: 2003-08-22T04:00:00 Last Updated: 2024-08-08T01:58:10.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) via a short authorization key name. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000729 - http://www.redhat.com/support/errata/RHSA-2003-258.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A129 - http://www.redhat.com/support/errata/RHSA-2003-259.html - http://mail.gnom