Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
: References: - http://www.debian.org/security/2003/dsa-380 - http://www.redhat.com/support/errata/RHSA-2003-067.html - http://www.redhat.com/support/errata/RHSA-2003-066.html - http://marc.info/?l=bugtraq&m=104612710031920&w=2 - http://www.redhat.com/support/errata/RHSA-2003-064.html - http://www.redhat.com/support/errata/RHSA-2003-065.html - http://www.securityfocus.com/bid/6940 - http://www.iss.net/security_center/static/11414.php - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html - http://www.openwall.com/lists/oss-security/2024/06/15/1
CVE ID: CVE-2003-0064 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:43:35.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104612710031920&w=2 - http://www.securityfocus.com/advisories/6236 - http://www.iss.net/security_center/static/11414.php - http
10031920&w=2 - http://www.securityfocus.com/advisories/6236 - http://www.iss.net/security_center/static/11414.php - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html - http://www.securityfocus.com/bid/6942
CVE ID: CVE-2003-0065 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:43:35.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: The uxterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104612710031920&w=2 - http://www.iss.net/security_center/static/11414.php - http://archives.neohapsis.com/archives/vulnwatch/20
10031920&w=2 - http://www.iss.net/security_center/static/11414.php - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html - http://www.securityfocus.com/bid/6945
CVE ID: CVE-2003-0066 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:43:35.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/advisories/5137 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:003 - http://marc.info/?l=bugt
cus.com/advisories/5137 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:003 - http://marc.info/?l=bugtraq&m=104612710031920&w=2 - http://www.redhat.com/support/errata/RHSA-2003-054.html - http://www.redhat.com/support/errata/RHSA-2003-055.html - http://www.securityfocus.com/bid/6953 - http://www.iss.net/security_center/static/11414.php - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html
CVE ID: CVE-2003-0067 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:43:34.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104612710031920&w=2 - http://www.iss.net/security_center/static/11414.php - http://archives.neohapsis.com/archives/vulnwatc
612710031920&w=2 - http://www.iss.net/security_center/static/11414.php - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html
CVE ID: CVE-2003-0068 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:43:35.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10237 - http://marc.info/?l=bugtraq&m=104612710031920&w=2 - http://www.mandrakesoft.com/security/advisories
ocus.com/bid/10237 - http://marc.info/?l=bugtraq&m=104612710031920&w=2 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:040 - http://www.debian.org/security/2004/dsa-496 - http://www.iss.net/security_center/static/11414.php - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html
CVE ID: CVE-2003-0069 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:43:35.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104612710031920&w=2 - http://www.iss.net/security_center/static/11414.php - http://archives.neohapsis.com/archives/vulnwatc
612710031920&w=2 - http://www.iss.net/security_center/static/11414.php - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html - http://www.osvdb.org/8347
CVE ID: CVE-2003-0070 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:43:35.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104612710031920&w=2 - http://www.redhat.com/support/
CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104612710031920&w=2 - http://www.redhat.com/support/errata/RHSA-2003-053.html - http://www.iss.net/security_center/static/11414.php - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html - http://seclists.org/lists/bugtraq/2003/Mar/0010.html
CVE ID: CVE-2003-0071 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:43:34.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows attackers to cause a denial of service via a certain character escape sequence that causes the terminal to enter a tight loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-380 - http://www.redhat.com/support/errata/RHSA-2003-067.html - http://www.redhat.com/support/errata/RHSA-2003-066.html - http://www.iss.net/security_center/static/11415.php - http://marc.info/?l=bug
at.com/support/errata/RHSA-2003-066.html - http://www.iss.net/security_center/static/11415.php - http://marc.info/?l=bugtraq&m=104612710031920&w=2 - http://www.redhat.com/support/errata/RHSA-2003-064.html - http://www.securityfocus.com/bid/6950 - http://www.redhat.com/support/errata/RHSA-2003-065.html - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html
CVE ID: CVE-2003-0072 State: PUBLISHED Published: 2003-03-26T05:00:00 Last Updated: 2024-08-08T01:43:35.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array (aka "array overrun"). Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-052.html - http://www.securityfocus.com/archive/1/316960/30/25250/threaded - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-005
ww.securityfocus.com/archive/1/316960/30/25250/threaded - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-005-buf.txt - http://www.redhat.com/support/errata/RHSA-2003-051.html - http://www.securityfocus.com/bid/7184 - http://www.debian.org/security/2003/dsa-266 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-54042-1
CVE ID: CVE-2003-0073 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:43:35.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000743 - http://www.debian.org/security/2003/dsa-303 - http://www.redhat.com/support/errata/RHSA-2003-093.html - http://www.mysql.com/doc/en/News-3.23.55.html - http://www.redhat.com/support/errata/RHSA-2003-166.html - http://www.redhat.com/support/erra
/doc/en/News-3.23.55.html - http://www.redhat.com/support/errata/RHSA-2003-166.html - http://www.redhat.com/support/errata/RHSA-2003-094.html - http://www.iss.net/security_center/static/11199.php - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:013 - http://www.linuxsecurity.com/advisories/engarde_advisory-2873.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A436 - http://marc.info/?l=bugtraq&m=104385719107879&w=2 - http://www.securityfocus.com/bid/6718
CVE ID: CVE-2003-0074 State: PUBLISHED Published: 2003-02-05T05:00:00 Last Updated: 2024-08-08T01:43:35.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in mpmain.c for plpnfsd of the plptools package allows remote attackers to execute arbitrary code via the functions (1) debuglog, (2) errorlog, and (3) infolog. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104386699725019&w=2 - http://www.securityfocus.com/bid/6715 - http://marc.info/?l=bugtraq&m=104385772908969&w=2 - http://www.iss.net/security_center/static/11193.php
CVE ID: CVE-2003-0075 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:43:35.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the myFseek function of samplein.c for Blade encoder (BladeEnc) 0.94.2 and earlier allows remote attackers to execute arbitrary code via a negative offset value following a "fmt" wave chunk. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/11227.php - http://www.securityfocus.com/bid/6745 - http://marc.info/?l=bugtraq&m=104446346127432&w=2 - http://marc.info/?l=bugtraq&m=104428700106672&w=2 - http://www.pivx.com/luigi/adv/blade942-adv.txt
CVE ID: CVE-2003-0076 State: PUBLISHED Published: 2003-02-11T05:00:00 Last Updated: 2024-08-08T01:43:35.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the directory parser for Direct Connect 4 Linux (dcgui) before 0.2.2 allows remote attackers to read files outside the sharelist. Additional Analyst Notes: - CVE Program Container: References: - http://dc.ketelhot.de/pipermail/dc/2003-January/000094.html - http://www.iss.net/security_center/static/11246.php - http://marc.info/?l=bugtraq&m=104437720116243&w=2
CVE ID: CVE-2003-0077 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:43:35.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hanterm (hanterm-xf) terminal emulator 2.0.5 and earlier, and possibly later versions, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104612710031920&w=2 - http://www.redhat.com/support/errata/RHSA-2
Container: References: - http://marc.info/?l=bugtraq&m=104612710031920&w=2 - http://www.redhat.com/support/errata/RHSA-2003-071.html - http://www.iss.net/security_center/static/11414.php - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html - http://www.osvdb.org/4917 - http://www.redhat.com/support/errata/RHSA-2003-070.html
CVE ID: CVE-2003-0078 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:43:35.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an information leak (timing discrepancy) that may make it easier to launch cryptographic attacks that rely on distinguishing between padding and MAC verification errors, possibly leading to extraction of the original plaintext, aka the "Vaudenay timing attack." Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/fre
denay timing attack." Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20030501-01-I - http://www.osvdb.org/3945 - http://www.iss.net/security_center/static/11369.php - http://www.openssl.org/news/secadv_20030219.txt - http://www.trustix.org/errata/2003/0005 - http://www.debian.org/security/2003/dsa-253 - http://www.redhat.com/support/errata/RHSA-2003-205.html - http://www.linuxsecurity.com/advisories/engarde_advisory-2874.html - http://www.ciac.org/ciac/bulletins/n-051.shtml - http://marc.info/?l=bugtraq&m=104567627211904&w=2 - http://www.redhat.com/support/errata/RHSA-2003-104.html - http://www.securityfocus.com/bid/688
q&m=104567627211904&w=2 - http://www.redhat.com/support/errata/RHSA-2003-104.html - http://www.securityfocus.com/bid/6884 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-001.txt.asc - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:020 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000570 - http://marc.info/?l=bugtraq&m=104568426824439&w=2 - http://marc.info/?l=bugtraq&m=104577183206905&w=2 - http://www.redhat.com/support/errata/RHSA-2003-082.html - http://www.redhat.com/support/errata/RHSA-2003-063.html - http://www.redhat.com/support/errata/RHSA-2003-062.html
CVE ID: CVE-2003-0079 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:43:35.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DEC UDK processing feature in the hanterm (hanterm-xf) terminal emulator before 2.0.5 allows attackers to cause a denial of service via a certain character escape sequence that causes the terminal to enter a tight loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/11415.php - http://marc.info/?l=bugtraq&m=104612710031920&w=2 - http://www.redhat.com/support/errata/RHSA-2003-071.html - http://www.osvdb.org/4918 - http://www.securityfocus.com/bid/6944 - http://arch
.com/support/errata/RHSA-2003-071.html - http://www.osvdb.org/4918 - http://www.securityfocus.com/bid/6944 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html - http://www.redhat.com/support/errata/RHSA-2003-070.html
CVE ID: CVE-2003-0080 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T01:43:35.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iptables ruleset in Gnome-lokkit in Red Hat Linux 8.0 does not include any rules in the FORWARD chain, which could allow attackers to bypass intended access restrictions if packet forwarding is enabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11552 - http://www.redhat.com/support/errata/RHSA-2003-072.html - http://www.osvdb.org/4400
CVE ID: CVE-2003-0081 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T01:43:35.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-077.html - http://www.novell.com/linux/security/advisories/2003_019_ethereal.html - http://www.ethereal.com/appnotes/enpa-sa-00008.html - http://www.linuxsecurity.com/advisories/gentoo_advisory-2949.html - https:/
w.ethereal.com/appnotes/enpa-sa-00008.html - http://www.linuxsecurity.com/advisories/gentoo_advisory-2949.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11497 - http://seclists.org/lists/fulldisclosure/2003/Mar/0080.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000627 - http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:051 - http://www.redhat.com/support/errata/RHSA-2003-076.html - http://www.debian.org/security/2003/dsa-258 - http://www.guninski.com/etherre.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A54 - http://www.securityfocus.com/bid/7049
CVE ID: CVE-2003-0082 State: PUBLISHED Published: 2003-03-26T05:00:00 Last Updated: 2024-08-08T01:43:35.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka "buffer underrun"). Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-052.html - http://www.securityfocus.com/archive/1/316960/30/25250/threaded - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-005-buf
ecurityfocus.com/archive/1/316960/30/25250/threaded - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-005-buf.txt - http://www.securityfocus.com/bid/7185 - http://www.redhat.com/support/errata/RHSA-2003-091.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4430 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A244 - http://www.redhat.com/support/errata/RHSA-2003-051.html - http://www.debian.org/security/2003/dsa-266 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-54042-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2536
CVE ID: CVE-2003-0083 State: PUBLISHED Published: 2003-03-28T05:00:00 Last Updated: 2024-08-08T01:43:35.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences, a different vulnerability than CVE-2003-0020. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A151 - http://secunia.com/advisories/8146 - http://marc.info/?
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A151 - http://secunia.com/advisories/8146 - http://marc.info/?l=bugtraq&m=108034113406858&w=2 - http://www.redhat.com/support/errata/RHSA-2003-139.html - http://marc.info/?l=bugtraq&m=108024081011678&w=2 - http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/loggers/mod_log_config.c?only_with_tag=APACHE_2_0_BRANCH - http://cvs.apache.org/viewcvs.cgi/apache-1.3/src/modules/standard/mod_log_config.c?only_with_tag=APACHE_1_3_25 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec23248
c%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r
1fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apac
%3E - https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2003-0084 State: PUBLISHED Published: 2003-04-29T04:00:00 Last Updated: 2024-08-08T01:43:36.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_auth_any package in Red Hat Enterprise Linux 2.1 and other operating systems does not properly escape arguments when calling other programs, which allows attackers to execute arbitrary commands via shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://www.itlab.musc.edu/webNIS/mod_auth_any.html - http://www.redhat.com/support/errata/RHSA-2003-113.html - http://rhn.redhat.com/errata/RHSA-2003-114.html - http://www.ciac.org/ciac/bulletins/n-090.shtml - http://www.securityfocus.com/bid/
edhat.com/errata/RHSA-2003-114.html - http://www.ciac.org/ciac/bulletins/n-090.shtml - http://www.securityfocus.com/bid/7448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11893