Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-0670 State: PUBLISHED Published: 2003-08-14T04:00:00Z Last Updated: 2024-09-17T02:06:52.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sustworks IPNetSentryX and IPNetMonitorX allow local users to sniff network packets via the setuid helper applications (1) RunTCPDump, which calls tcpdump, and (2) RunTCPFlow, which calls tcpflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a080703-1.txt
CVE ID: CVE-2003-0671 State: PUBLISHED Published: 2003-08-14T04:00:00Z Last Updated: 2024-09-17T03:49:26.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via the device name argument, as demonstrated in Sustworks IPNetSentryX and IPNetMonitorX the setuid program RunTCPFlow. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2003/a080703-1.txt - http://www.atstake.com/research/advisories/2003/a080703-2.txt
CVE ID: CVE-2003-0672 State: PUBLISHED Published: 2003-08-14T04:00:00Z Last Updated: 2024-09-17T02:06:32.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication, which is not properly handled when recording a log message. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-370
CVE ID: CVE-2003-0676 State: PUBLISHED Published: 2003-08-14T04:00:00 Last Updated: 2024-08-08T02:05:12.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (aka Sun ONE) allows remote attackers to read arbitrary files via "..%2f" (partially encoded dot dot) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106036588613929&w=2
CVE ID: CVE-2003-0677 State: PUBLISHED Published: 2003-08-14T04:00:00Z Last Updated: 2024-09-17T01:21:02.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco CSS 11000 routers on the CS800 chassis allow remote attackers to cause a denial of service (CPU consumption or reboot) via a large number of TCP SYN packets to the circuit IP address, aka "ONDM Ping failure." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/332284 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0079.html - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0073.html
CVE ID: CVE-2003-0678 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0679 State: PUBLISHED Published: 2003-08-15T04:00:00Z Last Updated: 2024-09-16T23:10:52.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the libcpr library for the Checkpoint/Restart (cpr) system on SGI IRIX 6.5.21f and earlier allows local users to truncate or overwrite certain files. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20030802-01-P
CVE ID: CVE-2003-0680 State: PUBLISHED Published: 2003-09-18T04:00:00Z Last Updated: 2024-09-17T00:37:20.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in NFS for SGI IRIX 6.5.21 and earlier may allow an NFS client to bypass read-only restrictions. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20030901-01-P
CVE ID: CVE-2003-0681 State: PUBLISHED Published: 2003-09-18T04:00:00 Last Updated: 2024-08-08T02:05:11.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106398718909274&w=2 - http://www.sendmail.org/8.12.10.html - http://www.redhat.com/support/errata/RHSA-2003-283.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A595 - http://www.mandriva.com
l - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A595 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:092 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3606 - http://www.kb.cert.org/vuls/id/108964 - http://www.debian.org/security/2003/dsa-384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13216 - http://marc.info/?l=bugtraq&m=106383437615742&w=2 - http://www.securityfocus.com/bid/8649 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000742
CVE ID: CVE-2003-0682 State: PUBLISHED Published: 2003-09-18T04:00:00 Last Updated: 2024-08-08T02:05:11.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: "Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106381409220492&w=2 - http://www.debian.org/security/2003/dsa-383 - http://www.redhat.com/support/errata/RHSA-2003-280.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000741 - http://www.debian.org/security/2003/dsa-382 - http://marc.info/?l=bugtraq&m=106373546332230&w=2 - https://
ncio=000741 - http://www.debian.org/security/2003/dsa-382 - http://marc.info/?l=bugtraq&m=106373546332230&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A446
CVE ID: CVE-2003-0683 State: PUBLISHED Published: 2003-10-30T05:00:00 Last Updated: 2024-08-08T02:05:12.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: NFS in SGI 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an /etc/exports entry uses wildcards without any hostnames or groups, which could allow attackers to bypass intended restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10095 - ftp://patches.sgi.com/support/free/security/advisories/20031004-01-P - http://www.securityfocus.com/bid/8921 - http://www.osvdb.org/2734
CVE ID: CVE-2003-0684 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2003-0685 State: PUBLISHED Published: 2003-08-15T04:00:00 Last Updated: 2024-08-08T02:05:11.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-372 - http://marc.info/?l=bugtraq&m=106071059430211&w=2
CVE ID: CVE-2003-0686 State: PUBLISHED Published: 2003-09-03T04:00:00 Last Updated: 2024-08-08T02:05:11.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://us2.samba.org/samba/ftp/pam_smb/ - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000734 - http://www.redhat.com/support/errata/RHSA-2003-261.html - http://marc.info/?l=bugtraq&m=106252769930090&w=2 - http://www.redhat.com/support/errata/RHSA-2003-262.html - http://www.kb.cert.org/vuls/id/6802
aq&m=106252769930090&w=2 - http://www.redhat.com/support/errata/RHSA-2003-262.html - http://www.kb.cert.org/vuls/id/680260 - http://secunia.com/advisories/9611 - http://www.debian.org/security/2003/dsa-374 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A469 - http://www.turbolinux.com/security/TLSA-2003-50.txt
CVE ID: CVE-2003-0687 State: REJECTED Published: 2004-06-03T04:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2003-0688 State: PUBLISHED Published: 2003-09-03T04:00:00 Last Updated: 2024-08-08T02:05:11.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2003:086 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A597 - ftp://patches.sgi.com/
86 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A597 - ftp://patches.sgi.com/support/free/security/advisories/20030803-01-P - http://www.sendmail.org/dnsmap1.html - http://www.redhat.com/support/errata/RHSA-2003-265.html - http://www.novell.com/linux/security/advisories/2003_035_sendmail.html - http://www.kb.cert.org/vuls/id/993452 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000727
CVE ID: CVE-2003-0689 State: PUBLISHED Published: 2003-09-03T04:00:00 Last Updated: 2024-08-08T02:05:11.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getgrouplist function in GNU libc (glibc) 2.2.4 and earlier allows attackers to cause a denial of service (segmentation fault) and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-249.html - http://www.redhat.com/support/errata/RHSA-2003-325.html
CVE ID: CVE-2003-0690 State: PUBLISHED Published: 2003-09-18T04:00:00 Last Updated: 2024-08-08T02:05:12.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000747 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A193 - http://marc.info/?l=bugtraq&m=1063745515134
ecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A193 - http://marc.info/?l=bugtraq&m=106374551513499&w=2 - http://www.debian.org/security/2004/dsa-443 - http://www.redhat.com/support/errata/RHSA-2003-289.html - http://cert.uni-stuttgart.de/archive/suse/security/2002/12/msg00101.html - http://www.redhat.com/support/errata/RHSA-2003-287.html - http://www.redhat.com/support/errata/RHSA-2003-270.html - http://www.redhat.com/support/errata/RHSA-2003-286.html - http://www.debian.org/security/2003/dsa-388 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:091 - http://www.kde.org/info/security/advisory-20030916-1.txt - http://www.redhat.com/support/errata/RHSA-2003-
SA-2003:091 - http://www.kde.org/info/security/advisory-20030916-1.txt - http://www.redhat.com/support/errata/RHSA-2003-288.html
CVE ID: CVE-2003-0691 State: REJECTED Published: 2006-02-27T23:00:00Z Last Updated: 2024-09-16T22:25:23.087Z Description: No description available.
CVE ID: CVE-2003-0692 State: PUBLISHED Published: 2003-09-18T04:00:00 Last Updated: 2024-08-08T02:05:12.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000747 - http://marc.info/?l=bugtraq&m=106374551513499&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A215 - http://cert.uni-stuttgart.
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A215 - http://cert.uni-stuttgart.de/archive/suse/security/2002/12/msg00101.html - http://www.redhat.com/support/errata/RHSA-2003-270.html - http://www.debian.org/security/2003/dsa-388 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:091 - http://www.kde.org/info/security/advisory-20030916-1.txt - http://www.redhat.com/support/errata/RHSA-2003-288.html
CVE ID: CVE-2003-0693 State: PUBLISHED Published: 2003-09-17T04:00:00 Last Updated: 2024-08-08T02:05:11.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000620.1-1 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010103.html - http://marc.info/?l=bugtraq&m=106381409220492&w=2 - h
grok.org.uk/pipermail/full-disclosure/2003-September/010103.html - http://marc.info/?l=bugtraq&m=106381409220492&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13191 - http://www.debian.org/security/2003/dsa-383 - http://marc.info/?l=bugtraq&m=106374466212309&w=2 - http://www.openssh.com/txt/buffer.adv - http://www.redhat.com/support/errata/RHSA-2003-280.html - http://www.cert.org/advisories/CA-2003-24.html - http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010135.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2719 - http://marc.info/?l=bugtraq&m=106381396120332&w=2 - http://lists.grok.org.uk/pipermail/full-disclosur
val%3Adef%3A2719 - http://marc.info/?l=bugtraq&m=106381396120332&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010146.html - http://www.debian.org/security/2003/dsa-382 - http://marc.info/?l=bugtraq&m=106373247528528&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:090 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A447 - http://marc.info/?l=bugtraq&m=106373546332230&w=2 - http://www.kb.cert.org/vuls/id/333628 - http://www.openwall.com/lists/oss-security/2024/07/01/3
CVE ID: CVE-2003-0694 State: PUBLISHED Published: 2003-09-18T04:00:00 Last Updated: 2024-08-08T02:05:11.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106398718909274&w=2 - http://www.sendmail.org/8.12.10.html - http://www.redhat.com/support/errata/RHSA-2003-283.html - http://archives.neohapsis.com/archives/fulldisclosure/2003-q3/4119.html - http://www.cert.org/advisories/CA-2003-25.html - http://www.kb.c
ohapsis.com/archives/fulldisclosure/2003-q3/4119.html - http://www.cert.org/advisories/CA-2003-25.html - http://www.kb.cert.org/vuls/id/784980 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:092 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A603 - http://marc.info/?l=bugtraq&m=106382859407683&w=2 - http://www.debian.org/security/2003/dsa-384 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.11/SCOSA-2004.11.txt - http://www.redhat.com/support/errata/RHSA-2003-284.html - http://marc.info/?l=bugtraq&m=106383437615742&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0113.html - https://oval.cisecurity.org/repository/searc
&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0113.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A572 - http://marc.info/?l=bugtraq&m=106381604923204&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2975 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000742
CVE ID: CVE-2003-0695 State: PUBLISHED Published: 2003-09-18T04:00:00 Last Updated: 2024-08-08T02:05:11.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffer_free in buffer.c, or (3) a separate function in channels.c, a different vulnerability than CVE-2003-0693. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=106381409220492&w=2 - http://www.debian.org/security/2003/dsa-383 - http://www.openssh.com/txt/buffer.adv - http://www.redhat.com/support/errata/RHSA-
ww.debian.org/security/2003/dsa-383 - http://www.openssh.com/txt/buffer.adv - http://www.redhat.com/support/errata/RHSA-2003-280.html - http://marc.info/?l=openbsd-security-announce&m=106375582924840 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000741 - http://marc.info/?l=bugtraq&m=106381396120332&w=2 - http://www.debian.org/security/2003/dsa-382 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:090 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A452 - http://marc.info/?l=bugtraq&m=106373546332230&w=2 - http://marc.info/?l=bugtraq&m=106382542403716&w=2
CVE ID: CVE-2003-0696 State: PUBLISHED Published: 2004-01-08T05:00:00 Last Updated: 2024-08-08T02:05:12.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows attackers to cause a denial of service (resource exhaustion). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13328 - https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=7&heading=AIX51&topic=SECURITY&month=200310&label=getipnodebyname%28%29+API+does+not+close+sockets.&date=20031001&bulletin=datafile150755&e
ic=SECURITY&month=200310&label=getipnodebyname%28%29+API+does+not+close+sockets.&date=20031001&bulletin=datafile150755&embed=true
CVE ID: CVE-2003-0697 State: PUBLISHED Published: 2003-09-23T04:00:00 Last Updated: 2024-08-08T02:05:12.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows local users to cause a denial of service (crash) or gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=IY46256&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IY45344&apar=only - http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2003.1605.1 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY45250&a
/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2003.1605.1 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY45250&apar=only
CVE ID: CVE-2003-0698 State: REJECTED Published: 2005-04-14T04:00:00 Last Updated: 2005-06-02T09:00:00 Description: No description available.
CVE ID: CVE-2003-0699 State: PUBLISHED Published: 2003-08-22T04:00:00 Last Updated: 2024-08-08T02:05:12.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: The C-Media PCI sound driver in Linux before 2.4.21 does not use the get_user function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0700. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-238.html - http://www.redhat.com/support/errata/RHSA-2003-198.html - http://www.redhat.com/support/errata/RHSA-2003-239.html - https://oval.cisecurity.org/repository/search/def
3-198.html - http://www.redhat.com/support/errata/RHSA-2003-239.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A387
CVE ID: CVE-2003-0700 State: PUBLISHED Published: 2004-01-22T05:00:00 Last Updated: 2024-08-08T02:05:11.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: The C-Media PCI sound driver in Linux before 2.4.22 does not use the get_user function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0699. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-238.html - http://www.redhat.com/support/errata/RHSA-2004-044.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
upport/errata/RHSA-2004-044.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A401
CVE ID: CVE-2003-0701 State: PUBLISHED Published: 2003-08-22T04:00:00 Last Updated: 2024-08-08T02:05:12.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Internet Explorer 6 SP1 for certain languages that support double-byte encodings (e.g., Japanese) allows remote attackers to execute arbitrary code via the Type property of an Object tag, a variant of CVE-2003-0344. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/334928 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12970 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-032 - http://marc.info/?l=bugtraq&m=106148101210479&w
s.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-032 - http://marc.info/?l=bugtraq&m=106148101210479&w=2
CVE ID: CVE-2003-0702 State: PUBLISHED Published: 2003-09-03T04:00:00 Last Updated: 2024-08-08T02:05:11.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in an ISAPI plugin for ISS Server Sensor 7.0 XPU 20.16, 20.18, and possibly other versions before 20.19, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code in Internet Information Server (IIS) via a certain URL through SSL. Additional Analyst Notes: - CVE Program Container: References: - http://www.enteredge.com/research/CAN-2003-0702.asp - https://exchange.xforce.ibmcloud.com/vulnerabilities/13088 - http://marc.info/?l=bugtraq&m=106278164225389&w=2
CVE ID: CVE-2003-0703 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T02:05:11.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: KisMAC before 0.05d trusts user-supplied variables to load arbitrary kernels or kernel modules, which allows local users to gain privileges via the $DRIVER_KEXT environment variable as used in (1) viha_driver.sh, (2) macjack_load.sh, or (3) airojack_load.sh, or (4) via "similar techniques" using exchangeKernel.sh. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13007 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13008 - http://www.securityfocus.com/
d.com/vulnerabilities/13007 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13008 - http://www.securityfocus.com/bid/8497 - http://www.atstake.com/research/advisories/2003/a082203-1.txt