deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-1370
Published: 2003-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in Nuked-Klan 1.2b allow remote attackers to inject arbitrary HTML or web script via (1) the Author field in the Guestbook module, (2) the Titre or Pseudo fields in the Forum module, or (3) "La Tribune Libre" in the Shoutbox module.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0330.html; http://www.securityfocus.com/bid/6697; http://www.securityfocus.com/bid/6699
CVE: CVE-2003-1371
Published: 2003-12-31
Description: Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the (1) Team, (2) News, or (3) Liens modules.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html; http://www.securityfocus.com/bid/6917; https://exchange.xforce.ibmcloud.com/vulnerabilities/11424
CVE: CVE-2003-1372
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in links.php script in myPHPNuke 1.8.8, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the (1) ratenum or (2) query parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0231.html; http://secunia.com/advisories/8125; http://www.osvdb.org/3931
CVE: CVE-2003-1373
Published: 2003-12-31
Description: Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via .. (dot dot) sequences followed by NULL (%00) characters in CGI parameters, as demonstrated using the lang parameter in prefs.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0245.html; http://www.securityfocus.com/bid/6889; https://exchange.xforce.ibmcloud.com/vulnerabilities/11407
CVE: CVE-2003-1374
Published: 2003-12-31
Description: Buffer overflow in disable of HP-UX 11.0 may allow local users to execute arbitrary code via a long argument to the (1) -r or (2)-c options.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0156.html; http://www.securityfocus.com/bid/6845; https://exchange.xforce.ibmcloud.com/vulnerabilities/11316
CVE: CVE-2003-1375
Published: 2003-12-31
Description: Buffer overflow in wall for HP-UX 10.20 through 11.11 may allow local users to execute arbitrary code by calling wall with a large file as an argument.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/3264; http://www.securityfocus.com/advisories/5369; http://www.securityfocus.com/archive/1/310908
CVE: CVE-2003-1376
Published: 2003-12-31
Description: WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows local users to brute force the encryption keys and extract the data from the zip file by guessing the state of the stream coder.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-255
References: http://securityreason.com/securityalert/3265; http://www.securityfocus.com/archive/1/311059; http://www.securityfocus.com/bid/6805
CVE: CVE-2003-1377
Published: 2003-12-31
Description: Buffer overflow in the reverse DNS lookup of Smart IRC Daemon (SIRCD) 0.4.0 and 0.4.4 allows remote attackers to execute arbitrary code via a client with a long hostname.
CVSS Score: 8.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/archive/1/312924; http://www.securityfocus.com/bid/6924; https://exchange.xforce.ibmcloud.com/vulnerabilities/11409
CVE: CVE-2003-1378
Published: 2003-12-31
Description: Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/archive/1/312910; http://www.securityfocus.com/archive/1/312929; http://www.securityfocus.com/bid/6923
CVE: CVE-2003-1379
Published: 2003-12-31
Description: clarkconnectd in ClarkConnect Linux 1.2 allows remote attackers to obtain sensitive information about the server via the characters (1) A, which reveals the date and time, (2) F, (3) M, which reveals 'ifconfig' information, (4) P, which lists the processes, (5) Y, which reveals the snort log files, or (6) b, which reveals /var/log/messages.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/archive/1/313080; http://www.securityfocus.com/bid/6934; https://exchange.xforce.ibmcloud.com/vulnerabilities/11419
CVE: CVE-2003-1380
Published: 2003-12-31
Description: Directory traversal vulnerability in BisonFTP Server 4 release 2 allows remote attackers to (1) list directories above the root via an 'ls @../' command, or (2) list files above the root via a "mget @../FILE" command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/archive/1/312032; http://www.securityfocus.com/bid/6873; https://exchange.xforce.ibmcloud.com/vulnerabilities/11347
CVE: CVE-2003-1381
Published: 2003-12-31
Description: Format string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life Server, allows remote attackers to execute arbitrary commands via format string specifiers in the amx_say command.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-134
References: http://securityreason.com/securityalert/3258; http://www.securityfocus.com/archive/1/313273; http://www.securityfocus.com/bid/6968
CVE: CVE-2003-1382
Published: 2003-12-31
Description: Buffer overflow in ISMail 1.4.3 and earlier allow remote attackers to execute arbitrary code via long domain names in (1) MAIL FROM or (2) RCPT TO fields.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/3254; http://www.securityfocus.com/archive/1/313363; http://www.securityfocus.com/bid/6972
CVE: CVE-2003-1383
Published: 2003-12-31
Description: WEB-ERP 0.1.4 and earlier allows remote attackers to obtain sensitive information via an HTTP request for the logicworks.ini file, which contains the MySQL database username and password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://securityreason.com/securityalert/3257; http://www.securityfocus.com/archive/1/313575; http://www.securityfocus.com/bid/6996
CVE: CVE-2003-1384
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in index.php in PY-Livredor 1.0 allows remote attackers to insert arbitrary web script or HTML via the (1) titre, (2) Votre pseudo, (3) Votre e-mail, or (4) Votre message fields.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0102.html; http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00024.html; http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004015.html
CVE: CVE-2003-1385
Published: 2003-12-31
Description: ipchat.php in Invision Power Board 1.1.1 allows remote attackers to execute arbitrary PHP code, if register_globals is enabled, by modifying the root_path parameter to reference a URL on a remote web server that contains the code.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0099.html; http://secunia.com/advisories/8182; http://www.osvdb.org/3357
CVE: CVE-2003-1386
Published: 2003-12-31
Description: AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to /support/messages, which displays the server's /var/log/messages file.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0377.html; http://archives.neohapsis.com/archives/bugtraq/2003-03/0370.html; http://www.securityfocus.com/bid/6980
CVE: CVE-2003-1387
Published: 2003-12-31
Description: Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://securityreason.com/securityalert/3253; http://www.securityfocus.com/archive/1/311194; http://www.securityfocus.com/archive/1/315794
CVE: CVE-2003-1388
Published: 2003-12-31
Description: Buffer overflow in Opera 7.02 Build 2668 allows remote attackers to crash Opera via a long HTTP request ending in a .ZIP extension.
CVSS Score: 9.3 (HIGH)
CWE: CWE-120
References: http://archives.neohapsis.com/archives/bugtraq/2003-04/0116.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/11740; http://archives.neohapsis.com/archives/bugtraq/2003-04/0116.html
CVE: CVE-2003-1389
Published: 2003-12-31
Description: RTS CryptoBuddy 1.2 and earlier truncates long passphrases without warning the user, which may make it easier to conduct certain brute force guessing attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://www.securityfocus.com/archive/1/311176; http://www.securityfocus.com/bid/6815; https://exchange.xforce.ibmcloud.com/vulnerabilities/11294
CVE: CVE-2003-1390
Published: 2003-12-31
Description: RTS CryptoBuddy 1.2 and earlier stores bytes 53 through 55 of a 55-byte passphrase in plaintext, which makes it easier for local users to guess the passphrase.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://www.securityfocus.com/archive/1/311176; https://exchange.xforce.ibmcloud.com/vulnerabilities/11297; http://www.securityfocus.com/archive/1/311176
CVE: CVE-2003-1391
Published: 2003-12-31
Description: RTS CryptoBuddy 1.0 and 1.2 uses a weak encryption algorithm for the passphrase and generates predictable keys, which makes it easier for attackers to guess the passphrase.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://www.securityfocus.com/archive/1/311176; http://www.securityfocus.com/bid/6810; https://exchange.xforce.ibmcloud.com/vulnerabilities/11298
CVE: CVE-2003-1392
Published: 2003-12-31
Description: CryptoBuddy 1.0 and 1.2 does not use the user-supplied passphrase to encrypt data, which could allow local users to use their own passphrase to decrypt the data.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-310
References: http://www.securityfocus.com/archive/1/311176; http://www.securityfocus.com/bid/6812; https://exchange.xforce.ibmcloud.com/vulnerabilities/11317
CVE: CVE-2003-1393
Published: 2003-12-31
Description: Buffer overflow in Gupta SQLBase 8.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long EXECUTE command.
CVSS Score: 8.5 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/8023; http://securityreason.com/securityalert/3256; http://www.securityfocus.com/archive/1/311159
CVE: CVE-2003-1394
Published: 2003-12-31
Description: CoffeeCup Software Password Wizard 4.0 stores sensitive information such as usernames and passwords in a .apw file under the web document root with insufficient access control, which allows remote attackers to obtain that information via a direct request for the file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://securityreason.com/securityalert/3259; http://www.securityfocus.com/archive/1/313580; http://www.securityfocus.com/bid/6995
CVE: CVE-2003-1395
Published: 2003-12-31
Description: Buffer overflow in KaZaA Media Desktop 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a response to the ad server.
CVSS Score: 9.0 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/3252; http://www.securityfocus.com/archive/1/309935; http://www.securityfocus.com/bid/6747
CVE: CVE-2003-1396
Published: 2003-12-31
Description: Heap-based buffer overflow in Opera 6.05 through 7.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a filename with a long extension.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: http://archives.neohapsis.com/archives/bugtraq/2003-04/0346.html; http://www.securityfocus.com/bid/7450; https://exchange.xforce.ibmcloud.com/vulnerabilities/11894
CVE: CVE-2003-1397
Published: 2003-12-31
Description: The PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service (crash) via an HTTP request containing a long string that gets passed to the ShowDocument method.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://securityreason.com/securityalert/3255; http://www.securityfocus.com/archive/1/311214; http://www.securityfocus.com/bid/6814
CVE: CVE-2003-1398
Published: 2003-12-31
Description: Cisco IOS 12.0 through 12.2, when IP routing is disabled, accepts false ICMP redirect messages, which allows remote attackers to cause a denial of service (network routing modification).
CVSS Score: 9.3 (HIGH)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0131.html; http://securitytracker.com/id?1006075; http://www.securityfocus.com/bid/6823
CVE: CVE-2003-1399
Published: 2003-12-31
Description: eject 2.0.10, when installed setuid on systems such as SuSE Linux 7.3, generates different error messages depending on whether a specified file exists or not, which allows local users to obtain sensitive information.
CVSS Score: 1.9 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0278.html; http://www.securityfocus.com/bid/6914; https://exchange.xforce.ibmcloud.com/vulnerabilities/11380
CVE: CVE-2003-1400
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in the Your_Account module for PHP-Nuke 5.0 through 6.0 allows remote attackers to inject arbitrary web script or HTML via the user_avatar parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/309959; http://www.securityfocus.com/archive/1/310115; http://www.securityfocus.com/bid/6750
CVE: CVE-2003-1401
Published: 2003-12-31
Description: login.php in php-Board 1.0 stores plaintext passwords in $username.txt with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information via a direct request.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-255
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0069.html; http://www.securityfocus.com/bid/6862; https://exchange.xforce.ibmcloud.com/vulnerabilities/11338
CVE: CVE-2003-1402
Published: 2003-12-31
Description: PHP remote file inclusion vulnerability in hit.php for Kietu 2.0 and 2.3 allows remote attackers to execute arbitrary PHP code via the url_hit parameter, a different vulnerability than CVE-2006-5015.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0071.html; http://secunia.com/advisories/10754; http://www.osvdb.org/3777
CVE: CVE-2003-1403
Published: 2003-12-31
Description: foo.php3 in DotBr 0.1 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0070.html; http://www.osvdb.org/5091; http://www.securityfocus.com/bid/6864
CVE: CVE-2003-1404
Published: 2003-12-31
Description: DotBr 0.1 stores config.inc with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information such as SQL usernames and passwords.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0070.html; http://www.osvdb.org/5092; http://www.securityfocus.com/bid/6865
CVE: CVE-2003-1405
Published: 2003-12-31
Description: DotBr 0.1 allows remote attackers to execute arbitrary shell commands via the cmd parameter to (1) exec.php3 or (2) system.php3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0070.html; http://www.osvdb.org/5089; http://www.osvdb.org/5090
CVE: CVE-2003-1406
Published: 2003-12-31
Description: PHP remote file inclusion vulnerability in D-Forum 1.00 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the (1) my_header parameter to header.php3 or (2) my_footer parameter to footer.php3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0072.html; http://www.securityfocus.com/bid/6879; https://exchange.xforce.ibmcloud.com/vulnerabilities/11342
CVE: CVE-2003-1407
Published: 2003-12-31
Description: Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/3251; http://www.securityfocus.com/archive/1/311359; http://www.securityfocus.com/bid/6829
CVE: CVE-2003-1408
Published: 2003-12-31
Description: Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/archive/1/311660; http://www.securityfocus.com/archive/1/311806; http://www.securityfocus.com/bid/6841
CVE: CVE-2003-1409
Published: 2003-12-31
Description: TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter to (1) in.php or (2) out.php, which reveals the path to the TOPo directory in the error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0049.html; http://secunia.com/advisories/8008; http://www.securityfocus.com/bid/6768
CVE: CVE-2003-1410
Published: 2003-12-31
Description: PHP remote file inclusion vulnerability in email.php (aka email.php3) in Cedric Email Reader 0.2 and 0.3 allows remote attackers to execute arbitrary PHP code via the cer_skin parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/8024; http://www.osvdb.org/5487; http://www.securityfocus.com/archive/1/311173
CVE: CVE-2003-1411
Published: 2003-12-31
Description: PHP remote file inclusion vulnerability in emailreader_execute_on_each_page.inc.php in Cedric Email Reader 0.4 allows remote attackers to execute arbitrary PHP code via the emailreader_ini parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/8024; http://www.osvdb.org/5900; http://www.securityfocus.com/archive/1/311173
CVE: CVE-2003-1412
Published: 2003-12-31
Description: PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator (GOsa) 1.0 allows remote attackers to execute arbitrary PHP code via the plugin parameter to (1) 3fax/1blocklists/index.php; (2) 6departamentadmin/index.php, (3) 5terminals/index.php, (4) 4mailinglists/index.php, (5) 3departaments/index.php, and (6) 2groupd/index.php in 2administration/; or (7) the base parameter to include/help.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-February/003932.html; http://secunia.com/advisories/8120; http://www.securityfocus.com/archive/1/313282/30/25760/threaded
CVE: CVE-2003-1413
Published: 2003-12-31
Description: parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using ".." sequences in the filename parameter and comparing the resulting error messages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://securityreason.com/securityalert/3260; http://www.securityfocus.com/archive/1/313517; http://www.securityfocus.com/bid/6992
CVE: CVE-2003-1414
Published: 2003-12-31
Description: Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via a ... (triple dot) in the filename parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://securityreason.com/securityalert/3260; http://www.securityfocus.com/archive/1/313517; http://www.securityfocus.com/bid/6990
CVE: CVE-2003-1415
Published: 2003-12-31
Description: NetCharts XBRL Server 4.0.0 allows remote attackers to obtain sensitive information via an HTTP request with an invalid chunked transfer encoding specification.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/8091; http://securityreason.com/securityalert/3261; http://www.securityfocus.com/archive/1/312187
CVE: CVE-2003-1416
Published: 2003-12-31
Description: BisonFTP Server 4 release 2 allows remote attackers to cause a denial of service (CPU consumption) via a long (1) ls or (2) cwd command.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/archive/1/312032; http://www.securityfocus.com/bid/6869; https://exchange.xforce.ibmcloud.com/vulnerabilities/11346
CVE: CVE-2003-1417
Published: 2003-12-31
Description: nCipher Support Software 6.00, when using generatekey KeySafe to import keys, does not delete the temporary copies of the key, which may allow local users to gain access to the key by reading the (1) key.pem or (2) key.der files.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-255
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1750&w=2; http://www.ncipher.com/support/advisories/advisory7_keyduplicates.html; http://www.securityfocus.com/bid/6927
CVE: CVE-2003-1418
Published: 2003-12-31
Description: Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the ETag header, which reveals the inode number, or (2) multipart MIME boundary, which reveals child process IDs (PID).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.openbsd.org/errata32.html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/6939
CVE: CVE-2003-1419
Published: 2003-12-31
Description: Netscape 7.0 allows remote attackers to cause a denial of service (crash) via a web page with an invalid regular expression argument to the JavaScript reformatDate function.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0338.html; http://www.securityfocus.com/bid/6959; https://exchange.xforce.ibmcloud.com/vulnerabilities/11444
CVE: CVE-2003-1420
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in Opera 6.0 through 7.0 with automatic redirection disabled allows remote attackers to inject arbitrary web script or HTML via the HTTP Location header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/313216; http://www.securityfocus.com/bid/6962; https://exchange.xforce.ibmcloud.com/vulnerabilities/11423
CVE: CVE-2003-1421
Published: 2003-12-31
Description: Unspecified vulnerability in mod_mysql_logger shared object in SuckBot 0.006 allows remote attackers to cause a denial of service (seg fault) via unknown attack vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://www.securityfocus.com/bid/6854; https://exchange.xforce.ibmcloud.com/vulnerabilities/11340; http://www.securityfocus.com/bid/6854
CVE: CVE-2003-1422
Published: 2003-12-31
Description: Multiple unspecified vulnerabilities in the installer for SYSLINUX 2.01, when running setuid root, allow local users to gain privileges via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-16
References: http://secunia.com/advisories/8077; http://syslinux.zytor.com/history.php; http://www.securityfocus.com/bid/6876
CVE: CVE-2003-1423
Published: 2003-12-31
Description: Petitforum stores the liste.txt data file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as e-mail addresses and encrypted passwords.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://securitytracker.com/id?1006117; https://exchange.xforce.ibmcloud.com/vulnerabilities/11358; http://securitytracker.com/id?1006117
CVE: CVE-2003-1424
Published: 2003-12-31
Description: message.php in Petitforum does not properly authenticate users, which allows remote attackers to impersonate forum users via a modified connect cookie.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-255
References: http://securitytracker.com/id?1006117; https://exchange.xforce.ibmcloud.com/vulnerabilities/11359; http://securitytracker.com/id?1006117