deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-1509
Published: 2003-03-03
Description: A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which allows other users in the same group to read or modify the new user's incoming email.
CVSS Score: 3.6 (LOW)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=75418; http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:026; http://www.redhat.com/support/errata/RHSA-2003-057.html
CVE: CVE-2002-1510
Published: 2003-03-03
Description: xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist.
CVSS Score: 10.0 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000533; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55602; http://wuarchive.wustl.edu/mirrors/NetBSD/NetBSD-current/xsrc/xfree/xc/programs/Xserver/hw/xfree86/CHANGELOG
CVE: CVE-2002-1511
Published: 2003-03-03
Description: The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.
CVSS Score: 5.0 (MEDIUM)
References: http://changelogs.credativ.org/debian/pool/main/v/vnc/vnc_3.3.6-3/changelog; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000640; http://security.gentoo.org/glsa/glsa-200302-15.xml
CVE: CVE-2003-0021
Published: 2003-03-03
Description: The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1920&w=2; http://www.iss.net/security_center/static/11413.php
CVE: CVE-2003-0022
Published: 2003-03-03
Description: The "screen dump" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1920&w=2; http://www.iss.net/security_center/static/11413.php
CVE: CVE-2003-0023
Published: 2003-03-03
Description: The menuBar feature in rxvt 2.7.8 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequence that inserts the commands into the menu.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1920&w=2; http://www.iss.net/security_center/static/11416.php
CVE: CVE-2003-0024
Published: 2003-03-03
Description: The menuBar feature in aterm 0.42 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequence that inserts the commands into the menu.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1920&w=2; http://www.iss.net/security_center/static/11416.php
CVE: CVE-2003-0049
Published: 2003-03-03
Description: Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.
CVSS Score: 7.5 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=61798; http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt; http://securitytracker.com/id?1006107
CVE: CVE-2003-0063
Published: 2003-03-03
Description: The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
CVSS Score: 7.3 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1920&w=2; http://www.debian.org/security/2003/dsa-380
CVE: CVE-2003-0064
Published: 2003-03-03
Description: The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1920&w=2; http://www.iss.net/security_center/static/11414.php
CVE: CVE-2003-0065
Published: 2003-03-03
Description: The uxterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1920&w=2; http://www.iss.net/security_center/static/11414.php
CVE: CVE-2003-0066
Published: 2003-03-03
Description: The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1920&w=2; http://www.iss.net/security_center/static/11414.php
CVE: CVE-2003-0068
Published: 2003-03-03
Description: The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1920&w=2; http://www.debian.org/security/2004/dsa-496
CVE: CVE-2003-0070
Published: 2003-03-03
Description: VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1920&w=2; http://seclists.org/lists/bugtraq/2003/Mar/0010.html
CVE: CVE-2003-0071
Published: 2003-03-03
Description: The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows attackers to cause a denial of service via a certain character escape sequence that causes the terminal to enter a tight loop.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1920&w=2; http://www.debian.org/security/2003/dsa-380
CVE: CVE-2003-0078
Published: 2003-03-03
Description: ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an information leak (timing discrepancy) that may make it easier to launch cryptographic attacks that rely on distinguishing between padding and MAC verification errors, possibly leading to extraction of the original plaintext, aka the "Vaudenay timing attack."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-203
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-001.txt.asc; ftp://patches.sgi.com/support/free/security/advisories/20030501-01-I; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000570
CVE: CVE-2003-0079
Published: 2003-03-03
Description: The DEC UDK processing feature in the hanterm (hanterm-xf) terminal emulator before 2.0.5 allows attackers to cause a denial of service via a certain character escape sequence that causes the terminal to enter a tight loop.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1920&w=2; http://www.iss.net/security_center/static/11415.php
CVE: CVE-2003-0087
Published: 2003-03-03
Description: Buffer overflow in libIM library (libIM.a) for National Language Support (NLS) on AIX 4.3 through 5.2 allows local users to gain privileges via several possible attack vectors, including a long -im argument to aixterm.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0066.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7938&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4691&w=2
CVE: CVE-2003-0088
Published: 2003-03-03
Description: TruBlueEnvironment for MacOS 10.2.3 and earlier allows local users to overwrite or create arbitrary files and gain root privileges by setting a certain environment variable that is used to write debugging information.
CVSS Score: 7.2 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=61798; http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt; http://www.atstake.com/research/advisories/2003/a021403-1.txt
CVE: CVE-2003-0093
Published: 2003-03-03
Description: The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service (crash) via an invalid RADIUS packet with a header length field of 0, which causes tcpdump to generate data within an infinite loop.
CVSS Score: 5.0 (MEDIUM)
References: http://www.debian.org/security/2003/dsa-261; http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027; http://www.redhat.com/support/errata/RHSA-2003-032.html
CVE: CVE-2003-0094
Published: 2003-03-03
Description: A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /dev/random, which causes mcookie to use an entropy source that is more predictable than expected, which may make it easier for certain types of attacks to succeed.
CVSS Score: 5.0 (MEDIUM)
References: http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:016; http://www.securityfocus.com/bid/6855; https://exchange.xforce.ibmcloud.com/vulnerabilities/11318
CVE: CVE-2003-0095
Published: 2003-03-03
Description: Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own authentication, as demonstrated using LOADPSP.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6042&w=2; http://otn.oracle.com/deploy/security/pdf/2003alert51.pdf; http://www.cert.org/advisories/CA-2003-05.html
CVE: CVE-2003-0096
Published: 2003-03-03
Description: Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long conversion string argument to the TO_TIMESTAMP_TZ function, (2) a long time zone argument to the TZ_OFFSET function, or (3) a long DIRECTORY parameter to the BFILENAME function.
CVSS Score: 9.0 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0073.html; http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0075.html; http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0083.html
CVE: CVE-2003-0097
Published: 2003-03-03
Description: Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possibly execute PHP code, by bypassing the CGI force redirect settings (cgi.force_redirect or --enable-force-cgi-redirect).
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1668&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0840&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2557&w=2
CVE: CVE-2003-0098
Published: 2003-03-03
Description: Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server.
CVSS Score: 10.0 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-015.0.txt; http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/apcupsd/apcupsd/src/apcnisd.c.diff?r1=1.5&r2=1.6; http://hsj.shadowpenguin.org/misc/apcupsd_exp.txt
CVE: CVE-2003-0099
Published: 2003-03-03
Description: Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers to cause a denial of service or execute arbitrary code, related to usage of the vsprintf function.
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-015.0.txt; http://securitytracker.com/id?1006108; http://sourceforge.net/project/shownotes.php?release_id=137892
CVE: CVE-2003-0100
Published: 2003-03-03
Description: Buffer overflow in Cisco IOS 11.2.x to 12.0.x allows remote attackers to cause a denial of service and possibly execute commands via a large number of OSPF neighbor announcements.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9090&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2715&w=2; http://www.iss.net/security_center/static/11373.php
CVE: CVE-2003-0101
Published: 2003-03-03
Description: miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.
CVSS Score: 10.0 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20030602-01-I; http://archives.neohapsis.com/archives/hp/2003-q1/0063.html; http://archives.neohapsis.com/archives/linux/engarde/2003-q1/0008.html
CVE: CVE-2003-1077
Published: 2003-03-05
Description: Unknown vulnerability in UFS for Solaris 9 for SPARC, with logging enabled, allows local users to cause a denial of service (UFS file system hang).
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/8234/; http://sunsolve.sun.com/search/document.do?assetkey=1-26-51300-1; http://www.securityfocus.com/bid/7032
CVE: CVE-2002-1337
Published: 2003-03-07
Description: Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.
CVSS Score: 10.0 (HIGH)
CWE: CWE-120
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-002.txt.asc; ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.6; ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.5
CVE: CVE-2003-0009
Published: 2003-03-07
Description: Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary script in the Local Computer security context via an hcp:// URL with the malicious script in the topic parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8686&w=2; http://www.ciac.org/ciac/bulletins/n-047.shtml; http://www.iss.net/security_center/static/11425.php
CVE: CVE-2003-0033
Published: 2003-03-07
Description: Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6064&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3409&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7824&w=2
CVE: CVE-2003-0050
Published: 2003-03-07
Description: parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0226&w=2; http://www.iss.net/security_center/static/11401.php
CVE: CVE-2003-0051
Published: 2003-03-07
Description: parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path of the server's installation path via a NULL file parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0226&w=2; http://www.iss.net/security_center/static/11402.php
CVE: CVE-2003-0052
Published: 2003-03-07
Description: parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to list arbitrary directories.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0226&w=2; http://www.iss.net/security_center/static/11403.php
CVE: CVE-2003-0053
Published: 2003-03-07
Description: Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to insert arbitrary script via the filename parameter, which is inserted into an error message.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0226&w=2; http://www.iss.net/security_center/static/11404.php
CVE: CVE-2003-0054
Published: 2003-03-07
Description: Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to the rtsp DESCRIBE method, which is inserted into a log file and executed when the log is viewed using a browser.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0226&w=2; http://www.iss.net/security_center/static/11405.php
CVE: CVE-2003-0055
Published: 2003-03-07
Description: Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via a long filename.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2003/Feb/25/applesa20030225macosx102.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0226&w=2; http://www.iss.net/security_center/static/11406.php
CVE: CVE-2003-0103
Published: 2003-03-07
Description: Format string vulnerability in Nokia 6210 handset allows remote attackers to cause a denial of service (crash, lockup, or restart) via a Multi-Part vCard with fields containing a large number of format string specifiers.
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/11421.php; http://www.securityfocus.com/bid/6952; http://www.iss.net/security_center/static/11421.php
CVE: CVE-2003-0107
Published: 2003-03-07
Description: Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-011.0.txt; ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-004.txt.asc; http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000619
CVE: CVE-2003-0108
Published: 2003-03-07
Description: isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000629; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4189&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9030&w=2
CVE: CVE-2003-0120
Published: 2003-03-07
Description: adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a predictable name.
CVSS Score: 1.2 (LOW)
References: http://www.debian.org/security/2003/dsa-256; http://www.iss.net/security_center/static/11439.php; http://www.securityfocus.com/bid/6978
CVE: CVE-2002-0387
Published: 2003-03-18
Description: Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary code via a long HTTP request URL.
CVSS Score: 7.5 (HIGH)
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/52022; http://www.atstake.com/research/advisories/2003/a031303-1.txt; http://www.ciac.org/ciac/bulletins/n-064.shtml
CVE: CVE-2003-0020
Published: 2003-03-18
Description: Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html; http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:046; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1920&w=2
CVE: CVE-2003-0030
Published: 2003-03-18
Description: Buffer overflows in protegrity.dll of Protegrity Secure.Data Extension Feature (SEF) before 2.2.3.9 allow attackers with SQL access to execute arbitrary code via the extended stored procedures (1) xp_pty_checkusers, (2) xp_pty_insert, or (3) xp_pty_select.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6677&w=2; http://secunia.com/advisories/8294; http://www.kb.cert.org/vuls/id/247545
CVE: CVE-2003-0067
Published: 2003-03-18
Description: The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1920&w=2; http://www.iss.net/security_center/static/11414.php
CVE: CVE-2003-0069
Published: 2003-03-18
Description: The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1920&w=2; http://www.iss.net/security_center/static/11414.php