cvelist/CVEDB huggingface dataset:
CVE-1999-0103
Published: 1996-02-08
CVSS score: 0.0
Source: Metasploit

Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm.
CVE-1999-0170
Published: 1997-01-01
CVSS score: 0.0
Source: Metasploit

Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.
CVE-1999-0209
Published: 1990-08-14
CVSS score: 0.0
Source: Metasploit

The SunView (SunTools) selection_svc facility allows remote users to read files.
CVE-1999-0256
Published: 1998-02-01
CVSS score: 0.0
Source: Metasploit

Buffer overflow in War FTP allows remote execution of commands.
CVE-1999-0502
Published: 1998-03-01
CVSS score: 0.0
Source: Metasploit

A Unix account has a default, null, blank, or missing password.
CVE-1999-0504
Published: 1997-01-01
CVSS score: 0.0
Source: Metasploit

A Windows NT local user or administrator account has a default, null, blank, or missing password.
CVE-1999-0506
Published: 1998-10-01
CVSS score: 0.0
Source: Metasploit

A Windows NT domain user or administrator account has a default, null, blank, or missing password.
CVE-1999-0508
Published: 1998-06-01
CVSS score: 0.0
Source: Metasploit

An account on a router, firewall, or other network device has a default, null, blank, or missing password.
CVE-1999-0516
Published: 1998-08-01
CVSS score: 0.0
Source: Metasploit

An SNMP community name is guessable.
CVE-1999-0517
Published: 1997-01-01
CVSS score: 0.0
Source: Metasploit

An SNMP community name is the default (e.g. public), null, or missing.
CVE-1999-0526
Published: 1997-07-01
CVSS score: 0.0
Source: Metasploit

An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.
CVE-1999-0532
Published: 1997-07-01
CVSS score: 0.0
Source: Metasploit

A DNS server allows zone transfers.
CVE-1999-0554
Published: 1999-01-01
CVSS score: 0.0
Source: Metasploit

NFS exports system-critical data to the world, e.g. / or a password file.
CVE-1999-0651
Published: 1999-01-01
CVSS score: 0.0
Source: Metasploit

The rsh/rlogin service is running.
CVE-1999-0667
Published: 1997-09-19
CVSS score: 0.0
Source: Metasploit

The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service.
CVE-1999-0874
Published: 1999-06-16
CVSS score: 0.0
Source: Metasploit

Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
CVE-1999-1011
Published: 1999-07-19
CVSS score: 0.0
Source: Metasploit

The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
CVE-1999-1053
Published: 1999-09-13
CVSS score: 0.0
Source: Metasploit

guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->".
CVE-1999-1510
Published: 1999-05-17
CVSS score: 0.0
Source: Metasploit

Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1) USER, (2) LIST, or (3) CWD commands.
CVE-2000-0114
Published: 2000-02-02
CVSS score: 0.0
Source: Nuclei

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.
CVE-2000-0248
Published: 2000-04-24
CVSS score: 0.0
Source: Metasploit

The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.
CVE-2000-0284
Published: 2000-04-16
CVSS score: 0.0
Source: Metasploit

Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands.
CVE-2000-0322
Published: 2000-04-24
CVSS score: 0.0
Source: Metasploit

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
CVE-2000-0380
Published: 2000-04-26
CVSS score: 0.0
Source: Metasploit

The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
CVE-2000-0402
Published: 2000-05-30
CVSS score: 0.0
Source: Metasploit

The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.
CVE-2000-0573
Published: 2000-07-07
CVSS score: 0.0
Source: Metasploit

The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.
CVE-2000-0649
Published: 2000-07-13
CVSS score: 0.0
Source: Metasploit

IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.
CVE-2000-0665
Published: 2000-07-17
CVSS score: 0.0
Source: Metasploit

GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.
CVE-2000-0760
Published: 2000-10-20
CVSS score: 0.0
Source: Nuclei

The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.
CVE-2000-0917
Published: 2000-12-19
CVSS score: 0.0
Source: Metasploit

Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
CVE-2000-0945
Published: 2000-12-19
CVSS score: 0.0
Source: Metasploit

The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory.
CVE-2000-1089
Published: 2001-01-09
CVSS score: 0.0
Source: Metasploit

Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.
CVE-2000-1209
Published: 2002-08-12
CVSS score: 0.0
Source: Metasploit

The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.
CVE-2001-0152
Published: 2001-05-03
CVSS score: 0.0
Source: Metasploit

The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders.
CVE-2001-0167
Published: 2001-05-03
CVSS score: 0.0
Source: Metasploit

Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.
CVE-2001-0168
Published: 2001-05-03
CVSS score: 0.0
Source: Metasploit

Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.
CVE-2001-0241
Published: 2001-06-27
CVSS score: 0.0
Source: Metasploit

Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.
CVE-2001-0311
Published: 2001-06-02
CVSS score: 0.0
Source: Metasploit

Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack client.
CVE-2001-0333
Published: 2001-06-27
CVSS score: 0.0
Source: Metasploit

Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.
CVE-2001-0414
Published: 2001-06-18
CVSS score: 0.0
Source: Metasploit

Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.
CVE-2001-0499
Published: 2001-07-21
CVSS score: 0.0
Source: Metasploit

Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD.
CVE-2001-0500
Published: 2001-07-21
CVSS score: 0.0
Source: Metasploit

Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.
CVE-2001-0537
Published: 2001-07-21
CVSS score: 0.0
Source: Metasploit/Nuclei

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
CVE-2001-0797
Published: 2001-12-12
CVSS score: 0.0
Source: Metasploit

Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
CVE-2001-0800
Published: 2001-12-06
CVSS score: 0.0
Source: Metasploit

lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
CVE-2001-0803
Published: 2001-12-06
CVSS score: 0.0
Source: Metasploit

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.
CVE-2001-1013
Published: 2001-09-12
CVSS score: 0.0
Source: Metasploit

Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.
CVE-2001-1320
Published: 2001-07-16
CVSS score: 0.0
Source: Metasploit

Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffer overflows), as demonstrated by the PROTOS LDAPv3 test suite.
CVE-2001-1473
Published: 2001-01-18
CVSS score: 0.0
Source: Nuclei

The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session ID that matches the Session ID of the target, but which uses a public key pair that is weaker than the target's public key, which allows the attacker to compute the corresponding private key and use the target's Session ID with the compromised key pair to masquerade as the target.
CVE-2001-1583
Published: 2001-12-31
CVSS score: 0.0
Source: Metasploit

lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220.
CVE-2002-0367
Published: 2002-06-25
CVSS score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CISA

smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.
CVE-2002-0392
Published: 2002-07-03
CVSS score: 0.0
Source: Metasploit

Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size.
CVE-2002-0422
Published: 2002-08-12
CVSS score: 0.0
Source: Metasploit

IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or (2) via the WRITE or MKCOL method, which leaks the IP in the Location server header.
CVE-2002-0649
Published: 2002-08-12
CVSS score: 0.0
Source: Metasploit

Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
CVE-2002-0965
Published: 2002-10-04
CVSS score: 0.0
Source: Metasploit

Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICE_NAME parameter, which is not properly handled when writing an error message to a log file.
CVE-2002-1059
Published: 2002-10-04
CVSS score: 0.0
Source: Metasploit

Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string.
CVE-2002-1120
Published: 2002-09-24
CVSS score: 0.0
Source: Metasploit

Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVE-2002-1123
Published: 2002-09-24
CVSS score: 0.0
Source: Metasploit

Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.
CVE-2002-1131
Published: 2002-10-04
CVSS score: 0.0
Source: Nuclei

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php.
CVE-2002-1142
Published: 2002-11-29
CVSS score: 0.0
Source: Metasploit

Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
CVE-2002-1214
Published: 2002-10-28
CVSS score: 0.0
Source: Metasploit

Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with malformed control data.
CVE-2002-1318
Published: 2002-12-11
CVSS score: 0.0
Source: Metasploit

Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.
CVE-2002-1359
Published: 2002-12-23
CVSS score: 0.0
Source: Metasploit

Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.
CVE-2002-1473
Published: 2003-04-22
CVSS score: 0.0
Source: Metasploit

Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of service and possibly execute arbitrary code.
CVE-2002-1643
Published: 2002-12-19
CVSS score: 0.0
Source: Metasploit

Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments.
CVE-2002-1864
Published: 2002-12-31
CVSS score: 0.0
Source: Metasploit

Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to read arbitrary files via a ".." (dot dot) in an HTTP request.
CVE-2002-2226
Published: 2002-12-31
CVSS score: 0.0
Source: Metasploit

Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filename argument.
CVE-2002-2268
Published: 2002-12-31
CVSS score: 0.0
Source: Metasploit

Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.
CVE-2003-0027
Published: 2003-02-07
CVSS score: 0.0
Source: Metasploit

Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allows remote attackers to read arbitrary files via the KCS_OPEN_PROFILE procedure.
CVE-2003-0050
Published: 2003-03-07
CVSS score: 0.0
Source: Metasploit

parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters.
CVE-2003-0109
Published: 2003-03-31
CVSS score: 0.0
Source: Metasploit

Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.
CVE-2003-0190
Published: 2003-05-12
CVSS score: 0.0
Source: Metasploit

OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.
CVE-2003-0201
Published: 2003-05-05
CVSS score: 0.0
Source: Metasploit

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
CVE-2003-0213
Published: 2003-05-12
CVSS score: 0.0
Source: Metasploit

ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow.
CVE-2003-0220
Published: 2003-05-12
CVSS score: 0.0
Source: Metasploit

Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet.
CVE-2003-0264
Published: 2003-05-27
CVSS score: 0.0
Source: Metasploit

Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.
CVE-2003-0270
Published: 2003-06-16
CVSS score: 0.0
Source: Metasploit

The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet or non-WEP connections.
CVE-2003-0344
Published: 2003-06-16
CVSS score: 0.0
Source: Metasploit

Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page.
CVE-2003-0349
Published: 2003-07-24
CVSS score: 0.0
Source: Metasploit

Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.
CVE-2003-0352
Published: 2003-08-18
CVSS score: 0.0
Source: Metasploit

Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.
CVE-2003-0471
Published: 2003-08-07
CVSS score: 0.0
Source: Metasploit

Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a long USER argument.
CVE-2003-0533
Published: 2004-06-01
CVSS score: 0.0
Source: Metasploit

Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via a packet that causes the DsRolerUpgradeDownlevelServer function to create long debug entries for the DCPROMO.LOG log file, as exploited by the Sasser worm.
CVE-2003-0558
Published: 2003-08-18
CVSS score: 0.0
Source: Metasploit

Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request.
CVE-2003-0694
Published: 2003-10-06
CVSS score: 0.0
Source: Metasploit

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
CVE-2003-0714
Published: 2003-11-17
CVSS score: 0.0
Source: Metasploit

The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000.
CVE-2003-0719
Published: 2004-06-01
CVSS score: 0.0
Source: Metasploit

Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.
CVE-2003-0722
Published: 2003-09-22
CVSS score: 0.0
Source: Metasploit

The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.
CVE-2003-0727
Published: 2003-10-20
CVSS score: 0.0
Source: Metasploit

Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.
CVE-2003-0812
Published: 2003-12-15
CVSS score: 0.0
Source: Metasploit

Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API.