deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-1316
Published: 2003-12-31
Description: mod.php in eNdonesia 8.2 allows remote attackers to obtain sensitive information via a ' (quote) value in the lng parameter, which reveals the path in an error message.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/9622; http://securitytracker.com/id?1007592; http://www.osvdb.org/3666
CVE: CVE-2003-1317
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in mod.php in eNdonesia 8.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/9622; http://securitytracker.com/id?1007592; http://www.osvdb.org/2480
CVE: CVE-2003-1318
Published: 2003-12-31
Description: Twilight Webserver 1.3.3.0 allows remote attackers to cause a denial of service (application crash) via a GET request for a long URI, a different vulnerability than CVE-2004-2376.
CVSS Score: 7.8 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9748&w=2; http://www.securityfocus.com/bid/22090; http://www.tripbit.org/advisories/twilight_advisory.txt
CVE: CVE-2003-1319
Published: 2003-12-31
Description: Multiple buffer overflows in SmartFTP 1.0.973, and other versions before 1.0.976, allow remote attackers to execute arbitrary code via (1) a long response to a PWD command, which triggers a stack-based overflow, and (2) a long line in a response to a file LIST command, which triggers a heap-based overflow.
CVSS Score: 7.6 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2003-06/0083.html; http://secunia.com/advisories/8998; http://security.nnov.ru/docs4679.html
CVE: CVE-2003-1320
Published: 2003-12-31
Description: SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-399
References: http://www.kb.cert.org/vuls/id/287771; http://www.kb.cert.org/vuls/id/AAMN-5L74VD; http://www.kb.cert.org/vuls/id/287771
CVE: CVE-2003-1321
Published: 2003-12-31
Description: Buffer overflow in Avant Browser 8.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4484&w=2; http://www.securityfocus.com/bid/8471; https://exchange.xforce.ibmcloud.com/vulnerabilities/12974
CVE: CVE-2003-1322
Published: 2003-12-31
Description: Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execute arbitrary code via a long (1) EXAMINE, (2) DELETE, (3) SUBSCRIBE, (4) RENAME, (5) UNSUBSCRIBE, (6) LIST, (7) LSUB, (8) STATUS, (9) LOGIN, (10) CREATE, or (11) SELECT command.
CVSS Score: 10.0 (HIGH)
References: http://www.iss.net/security_center/static/12203.php; http://www.securityfocus.com/archive/1/324136; http://www.securityfocus.com/bid/7842
CVE: CVE-2003-1323
Published: 2003-12-31
Description: Elm ME+ 2.4 before PL109S, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://www.elmme-mailer.org/elm-2.4ME+PL109S.patch.gz; http://www.elmme-mailer.org/elm-2.4ME+PL109S.patch.gz
CVE: CVE-2003-1324
Published: 2003-12-31
Description: Race condition in the can_open function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group.
CVSS Score: 4.6 (MEDIUM)
References: http://www.elmme-mailer.org/elm-2.4ME+PL109S.patch.gz; http://www.elmme-mailer.org/elm-2.4ME+PL109S.patch.gz
CVE: CVE-2003-1325
Published: 2003-12-31
Description: The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) via a certain connection string to UDP port 27015 that represents "absence of player informations," a related issue to CVE-2006-0734.
CVSS Score: 5.2 (MEDIUM)
References: http://aluigi.altervista.org/adv/csdos.txt; http://packetstormsecurity.org/0304-exploits/hl-headnut.c; http://aluigi.altervista.org/adv/csdos.txt
CVE: CVE-2003-1327
Published: 2003-12-31
Description: Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute arbitrary code by uploading a file with a long pathname, which triggers the overflow when wu-ftpd constructs a notification message to the administrator.
CVSS Score: 9.3 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2003-09/0348.html; http://secunia.com/advisories/9835; http://securitytracker.com/id?1007775
CVE: CVE-2003-1329
Published: 2003-12-31
Description: ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote attackers to cause a denial of service.
CVSS Score: 7.8 (HIGH)
References: ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.2/connect-dos.patch; http://www.osvdb.org/34670; ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.2/connect-dos.patch
CVE: CVE-2003-1330
Published: 2003-12-31
Description: Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom "on strip unsuccessful" hooks, which allows remote attackers to bypass e-mail attachment filtering policies via an attachment that MAILsweeper can detect but not remove.
CVSS Score: 5.0 (MEDIUM)
References: http://www.mimesweeper.com/download/bin/Patches/MAILsweeper_Patches_301_ReadMe.htm; http://www.securityfocus.com/bid/7226; https://exchange.xforce.ibmcloud.com/vulnerabilities/11745
CVE: CVE-2003-1331
Published: 2003-12-31
Description: Stack-based buffer overflow in the mysql_real_connect function in the MySql client library (libmysqlclient) 4.0.13 and earlier allows local users to execute arbitrary code via a long socket name, a different vulnerability than CVE-2001-1453.
CVSS Score: 4.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2003-q2/1303.html; http://bugs.mysql.com/bug.php?id=564; http://www.securityfocus.com/bid/7887
CVE: CVE-2003-1332
Published: 2003-12-31
Description: Stack-based buffer overflow in the reply_nttrans function in Samba 2.2.7a and earlier allows remote attackers to execute arbitrary code via a crafted request, a different vulnerability than CVE-2003-0201.
CVSS Score: 7.5 (HIGH)
References: http://www.redhat.com/support/errata/RHSA-2003-096.html; http://www.securiteam.com/exploits/5TP0M2AAKS.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/12749
CVE: CVE-2003-1333
Published: 2003-12-31
Description: Unspecified vulnerability in the Cache' Server Page (CSP) implementation in InterSystems Cache' 4.0.3 through 5.0.5 allows remote attackers to "gain complete control" of a server.
CVSS Score: 10.0 (HIGH)
References: http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/8bdc0e496226edd1/60e9179edb4a4d43; http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/8bdc0e496226edd1/60e9179edb4a4d43
CVE: CVE-2003-1334
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) before 1.2.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.bitfolge.de/snif-en.html; http://www.bitfolge.de/snif-en.html
CVE: CVE-2003-1335
Published: 2003-12-31
Description: Directory traversal vulnerability in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) before 1.2.5 allows remote attackers to download files from locations above the snif directory.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.bitfolge.de/snif-en.html; http://www.bitfolge.de/snif-en.html
CVE: CVE-2003-1336
Published: 2003-12-31
Description: Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0060.html; http://secunia.com/advisories/9996; http://www.osvdb.org/2665
CVE: CVE-2003-1337
Published: 2003-12-31
Description: Heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2003-06/0235.html; http://www.securityfocus.com/bid/8062; https://exchange.xforce.ibmcloud.com/vulnerabilities/12466
CVE: CVE-2003-1338
Published: 2003-12-31
Description: CRLF injection vulnerability in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to inject arbitrary HTTP headers and possibly conduct HTTP Response Splitting attacks via CRLF sequences in the Location header.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-06/0235.html; http://archives.neohapsis.com/archives/bugtraq/2003-06/0235.html
CVE: CVE-2003-1339
Published: 2003-12-31
Description: Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare allows remote attackers to cause a denial of service (crash) or execute arbitrary code, as demonstrated via (1) a long GET request and (2) a long operation or autologin parameter to SwEzModule.dll.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2654&w=2; http://seclists.org/bugtraq/2003/Dec/0195.html; http://securitytracker.com/id?1008412
CVE: CVE-2003-1340
Published: 2003-12-31
Description: Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 5.6 and 6.5 allow remote authenticated users to execute arbitrary SQL commands via (1) a uid (user) cookie to modules.php; and allow remote attackers to execute arbitrary SQL commands via an aid (admin) cookie to the Web_Links module in a (2) viewlink, (3) MostPopular, or (4) NewLinksDate action, different vectors than CVE-2003-0279.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://securityreason.com/securityalert/3185; http://www.securityfocus.com/archive/1/323425; http://www.securityfocus.com/archive/1/480866/100/0/threaded
CVE: CVE-2003-1341
Published: 2003-12-31
Description: The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.
CVSS Score: 7.5 (HIGH)
CWE: CWE-16
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html; http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13353; http://secunia.com/advisories/7881
CVE: CVE-2003-1342
Published: 2003-12-31
Description: Trend Micro Virus Control System (TVCS) 1.8 running with IIS allows remote attackers to cause a denial of service (memory consumption) in IIS via multiple URL requests for ActiveSupport.exe.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html; http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html; http://secunia.com/advisories/7881
CVE: CVE-2003-1343
Published: 2003-12-31
Description: Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gain access to the web management interface via the vcc parameter, possibly "[PII_REDACTED]d3".
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html; http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13352; http://secunia.com/advisories/7881
CVE: CVE-2003-1344
Published: 2003-12-31
Description: Trend Micro Virus Control System (TVCS) Log Collector allows remote attackers to obtain usernames, encrypted passwords, and other sensitive information via a URL request for getservers.exe with the action parameter set to "selects1", which returns log files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html; http://secunia.com/advisories/7881; http://www.securityfocus.com/bid/6618
CVE: CVE-2003-1345
Published: 2003-12-31
Description: Directory traversal vulnerability in s.dll in WebCollection Plus 5.00 allows remote attackers to view arbitrary files in c:\ via a full pathname in the d parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8210&w=2; http://www.securityfocus.com/bid/6574; https://exchange.xforce.ibmcloud.com/vulnerabilities/11064
CVE: CVE-2003-1346
Published: 2003-12-31
Description: D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1451&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9909&w=2; http://www.securityfocus.com/bid/6609
CVE: CVE-2003-1347
Published: 2003-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to comment.php, (2) uid parameter to profiles.php, (3) uid to users.php, and (4) homepage field.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/3226; http://www.geeklog.net/filemgmt/visit.php?lid=101; http://www.securityfocus.com/archive/1/306770
CVE: CVE-2003-1348
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in guestbook.cgi in ftls.org Guestbook 1.1 allows remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) name, or (3) title field.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/3227; http://www.securityfocus.com/archive/1/308312; http://www.securityfocus.com/bid/6686
CVE: CVE-2003-1349
Published: 2003-12-31
Description: Directory traversal vulnerability in NITE ftp-server (NiteServer) 1.83 allows remote attackers to list arbitrary directories via a "\.." (backslash dot dot) in the CD (CWD) command.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0022.html; http://secunia.com/advisories/7879; http://www.securityfocus.com/bid/6648
CVE: CVE-2003-1350
Published: 2003-12-31
Description: List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a "|" (pipe), which is used as a field delimiter, into the bannerurl field.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://securityreason.com/securityalert/3230; http://www.securityfocus.com/archive/1/308300; http://www.securityfocus.com/bid/6685
CVE: CVE-2003-1351
Published: 2003-12-31
Description: Directory traversal vulnerability in edittag.cgi in EditTag 1.1 allows remote attackers to read arbitrary files via a "%2F.." (encoded slash dot dot) in the file parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://securityreason.com/securityalert/3231; http://www.securityfocus.com/archive/1/308162; http://www.securityfocus.com/bid/6675
CVE: CVE-2003-1352
Published: 2003-12-31
Description: Gabber 0.8.7 sends an email to a specific address during user login and logout, which allows remote attackers to obtain user session activity and Gabber version number by sniffing.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0179.html; http://www.securityfocus.com/bid/6624; https://exchange.xforce.ibmcloud.com/vulnerabilities/11115
CVE: CVE-2003-1353
Published: 2003-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in Outreach Project Tool (OPT) 0.946b allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the news field.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0119.html; http://www.securityfocus.com/bid/6631; https://exchange.xforce.ibmcloud.com/vulnerabilities/11096
CVE: CVE-2003-1354
Published: 2003-12-31
Description: Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://seclists.org/lists/bugtraq/2003/Jan/0178.html; http://www.pivx.com/kristovich/adv/mk001/; http://www.securiteam.com/securitynews/5EP0O0K8UO.html
CVE: CVE-2003-1355
Published: 2003-12-31
Description: Buffer overflow in the remote console (rcon) in Battlefield 1942 1.2 and 1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long user name and password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0342.html; http://www.securityfocus.com/bid/6967; https://exchange.xforce.ibmcloud.com/vulnerabilities/11426
CVE: CVE-2003-1356
Published: 2003-12-31
Description: The "file handling" in sort in HP-UX 10.01 through 10.20, and 11.00 through 11.11 is "incorrect," which allows attackers to gain access or cause a denial of service via unknown vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/hp/2003-q1/0009.html; http://www.securityfocus.com/bid/6640; https://exchange.xforce.ibmcloud.com/vulnerabilities/11107
CVE: CVE-2003-1357
Published: 2003-12-31
Description: ProxyView has a default administrator password of Administrator for Embedded Windows NT, which allows remote attackers to gain access.
CVSS Score: 10.0 (HIGH)
CWE: CWE-16
References: http://securityreason.com/securityalert/3228; http://www.securityfocus.com/archive/1/308733; http://www.securityfocus.com/bid/6708
CVE: CVE-2003-1358
Published: 2003-12-31
Description: rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://securityreason.com/securityalert/3236; http://www.securityfocus.com/advisories/4960; http://www.securityfocus.com/archive/1/324381
CVE: CVE-2003-1359
Published: 2003-12-31
Description: Buffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain privileges via a long command line argument.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/3236; http://www.securityfocus.com/advisories/4959; http://www.securityfocus.com/archive/1/324381
CVE: CVE-2003-1360
Published: 2003-12-31
Description: Buffer overflow in the setupterm function of (1) lanadmin and (2) landiag programs of HP-UX 10.0 through 10.34 allows local users to execute arbitrary code via a long TERM environment variable.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/3236; http://www.securityfocus.com/advisories/4957; http://www.securityfocus.com/archive/1/324381
CVE: CVE-2003-1361
Published: 2003-12-31
Description: Unknown vulnerability in VERITAS Bare Metal Restore (BMR) of Tivoli Storage Manager (TSM) 3.1.0 through 3.2.1 allows remote attackers to gain root privileges on the BMR Main Server.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0333.html; http://seer.support.veritas.com/docs/252933.htm; http://seer.support.veritas.com/docs/254442.htm
CVE: CVE-2003-1362
Published: 2003-12-31
Description: Bastille B.02.00.00 of HP-UX 11.00 and 11.11 does not properly configure the (1) NOVRFY and (2) NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of system users and expand defined sendmail aliases.
CVSS Score: 7.8 (HIGH)
CWE: CWE-16
References: http://archives.neohapsis.com/archives/hp/2003-q1/0033.html; http://www.securityfocus.com/bid/6878; https://exchange.xforce.ibmcloud.com/vulnerabilities/11366
CVE: CVE-2003-1363
Published: 2003-12-31
Description: The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port (9999), which allows remote attackers to mount brute force attacks on the administration console without detection.
CVSS Score: 6.4 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0149.html; http://www.iss.net/security_center/static/11310.php; http://www.securityfocus.com/bid/6842
CVE: CVE-2003-1364
Published: 2003-12-31
Description: Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service (crash) via an HTTP GET message with empty (1) Connection or (2) Range fields.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2003-04/0095.html; http://www.securityfocus.com/bid/7287; https://exchange.xforce.ibmcloud.com/vulnerabilities/11718
CVE: CVE-2003-1365
Published: 2003-12-31
Description: The escape_dangerous_chars function in CGI::Lite 2.0 and earlier does not correctly remove special characters including (1) "\" (backslash), (2) "?", (3) "~" (tilde), (4) "^" (carat), (5) newline, or (6) carriage return, which could allow remote attackers to read or write arbitrary files, or execute arbitrary commands, in shell scripts that rely on CGI::Lite to filter such dangerous inputs.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0065.html; http://search.cpan.org/~smylers/CGI-Lite-2.02/Lite.pm; http://securityreason.com/securityalert/3237
CVE: CVE-2003-1366
Published: 2003-12-31
Description: chpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a hard link attack on a temporary file used to store user database information.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://securityreason.com/securityalert/3238; http://www.epita.fr/~bevand_m/asa/asa-0001; http://www.securityfocus.com/archive/1/309962
CVE: CVE-2003-1367
Published: 2003-12-31
Description: The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command.
CVSS Score: 7.8 (HIGH)
CWE: CWE-16
References: http://securityreason.com/securityalert/3235; http://www.securityfocus.com/archive/1/310113; http://www.securityfocus.com/bid/6761
CVE: CVE-2003-1368
Published: 2003-12-31
Description: Buffer overflow in the 32bit FTP client 9.49.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP server banner.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0054.html; http://www.securityfocus.com/bid/6764; https://exchange.xforce.ibmcloud.com/vulnerabilities/11234
CVE: CVE-2003-1369
Published: 2003-12-31
Description: Buffer overflow in ByteCatcher FTP client 1.04b allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP server banner.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0054.html; http://www.securityfocus.com/bid/6762; https://exchange.xforce.ibmcloud.com/vulnerabilities/11235