deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-2413
Published: 2002-12-31
Description: WebSite Pro 3.1.11.0 on Windows allows remote attackers to read script source code for files with extensions greater than 3 characters via a URL request that uses the equivalent 8.3 file name.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0178.html; http://www.iss.net/security_center/static/9147.php; http://www.securityfocus.com/bid/4783
CVE: CVE-2002-2414
Published: 2002-12-31
Description: Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service (crash).
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8438&w=2; http://www.iss.net/security_center/static/10673.php; http://www.securityfocus.com/bid/6218
CVE: CVE-2002-2415
Published: 2002-12-31
Description: Allied Telesyn AT-8024 1.3.1 and Rapier 24 switches allow remote authenticated users to cause a denial of service in the management interface via a stream of zero (null) bytes sent via UDP to a running service.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0291.html; http://www.iss.net/security_center/static/10680.php; http://www.securityfocus.com/bid/6233
CVE: CVE-2002-2416
Published: 2002-12-31
Description: Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL GET request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0083.html; http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00306.html; http://www.iss.net/security_center/static/10672.php
CVE: CVE-2002-2417
Published: 2002-12-31
Description: acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0088.html; http://securityreason.com/securityalert/3334; http://www.iss.net/security_center/static/10681.php
CVE: CVE-2002-2418
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in acFreeProxy (aka acFP) 1.33 beta 7 allows remote attackers to inject arbitrary web script or HTML via the URL, which is inserted into an error page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0089.html; http://online.securityfocus.com/archive/1/300925; http://securityreason.com/securityalert/3327
CVE: CVE-2002-2419
Published: 2002-12-31
Description: Direct connect text client (DCTC) client 0.83.3 allows remote attackers to cause a denial of service (crash) via a string ending with a NULL byte character.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://ac2i.tzo.com/dctc/ChangeLog; http://www.iss.net/security_center/static/10181.php; http://www.securityfocus.com/bid/5781
CVE: CVE-2002-2420
Published: 2002-12-31
Description: site_searcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://securitytracker.com/id?1005190; http://www.securityfocus.com/bid/5605; http://securitytracker.com/id?1005190
CVE: CVE-2002-2421
Published: 2002-12-31
Description: acWEB 1.14 allows remote attackers to cause a denial of service (crash) via an HTTP request for a MS-DOS device name such as COM2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0304.html; http://www.iss.net/security_center/static/10190.php; http://archives.neohapsis.com/archives/bugtraq/2002-09/0304.html
CVE: CVE-2002-2422
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 allows remote attackers to inject arbitrary web script or HTML via a URL, which inserts the script into the resulting error message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://online.securityfocus.com/archive/1/294020; http://online.securityfocus.com/archive/1/294160; http://www.securiteam.com/windowsntfocus/6G00K0A5SM.html
CVE: CVE-2002-2423
Published: 2002-12-31
Description: Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://archive.cert.uni-stuttgart.de/bugtraq/2002/09/msg00267.html; http://www.iss.net/security_center/static/10153.php; http://www.securityfocus.com/bid/5770
CVE: CVE-2002-2424
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in PHP(Reactor) 1.2.7 pl1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the style attribute of an HTML tag.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0262.html; http://www.iss.net/security_center/static/9958.php; http://www.securityfocus.com/bid/5569
CVE: CVE-2002-2425
Published: 2002-12-31
Description: Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such as (1) AdminViewError and (2) AdminAddadmin via a direct request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0486.html; http://www.iss.net/security_center/static/9756.php; http://www.securityfocus.com/bid/5383
CVE: CVE-2002-2426
Published: 2002-12-31
Description: Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote attackers to execute arbitrary published applications, and possibly other programs, as authenticated users via the InitialProgram key in an ICA connection. NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.org/0210-exploits/hackingcitrix.txt; http://secunia.com/advisories/27633; http://support.citrix.com/article/CTX115245
CVE: CVE-2002-1378
Published: 2003-01-02
Description: Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r parameters to slurpd, (2) a malicious ldapfilter.conf file that is not properly handled by getfilter functions, (3) a malicious ldaptemplates.conf that causes an overflow in libldap, (4) a certain access control list that causes an overflow in slapd, or (5) a long generated filename for logging rejected replication requests.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000556; http://www.ciac.org/ciac/bulletins/n-043.shtml; http://www.debian.org/security/2003/dsa-227
CVE: CVE-2002-1379
Published: 2003-01-02
Description: OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges.
CVSS Score: 7.5 (HIGH)
References: http://www.debian.org/security/2003/dsa-227; http://www.mandriva.com/security/advisories?name=MDKSA-2003:006; http://www.novell.com/linux/security/advisories/2002_047_openldap2.html
CVE: CVE-2002-1384
Published: 2003-01-02
Description: Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9980&w=2; http://www.debian.org/security/2003/dsa-222; http://www.debian.org/security/2003/dsa-226
CVE: CVE-2002-1386
Published: 2003-01-02
Description: Buffer overflow in traceroute-nanog (aka traceroute-ng) may allow local users to execute arbitrary code via a long hostname argument.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2634&w=2; http://www.debian.org/security/2003/dsa-254; http://www.iss.net/security_center/static/10608.php
CVE: CVE-2002-1387
Published: 2003-01-02
Description: The spray mode in traceroute-nanog (aka traceroute-ng) may allow local users to overwrite arbitrary memory locations via an array index overflow using the nprobes (number of probes) argument.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2634&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2634&w=2
CVE: CVE-2002-1388
Published: 2003-01-02
Description: Cross-site scripting (XSS) vulnerability in MHonArc before 2.5.14 allows remote attackers to inject arbitrary HTML into web archive pages via HTML mail messages.
CVSS Score: 4.3 (MEDIUM)
References: http://www.debian.org/security/2002/dsa-221; http://www.mhonarc.org/archive/cgi-bin/mesg.cgi?a=mhonarc-users&i=[PII_REDACTED]20.gBM1K8502180%40mcguire.earlhood.com; http://www.securityfocus.com/bid/6479
CVE: CVE-2002-1389
Published: 2003-01-02
Description: Buffer overflow in typespeed 0.4.2 and earlier allows local users to gain privileges via long input.
CVSS Score: 4.6 (MEDIUM)
References: http://www.debian.org/security/2002/dsa-217; http://www.securityfocus.com/bid/6485; https://exchange.xforce.ibmcloud.com/vulnerabilities/10936
CVE: CVE-2003-1071
Published: 2003-01-03
Description: rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing stderr before executing wall, then supplying a spoofed from header.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/7825/; http://sunsolve.sun.com/search/document.do?assetkey=1-26-51980-1; http://www.kb.cert.org/vuls/id/944241
CVE: CVE-2002-0626
Published: 2003-01-07
Description: Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary users to conduct unauthorized activities.
CVSS Score: 10.0 (HIGH)
References: http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089; http://www.ciac.org/ciac/bulletins/m-123.shtml; http://www.iss.net/security_center/static/9347.php
CVE: CVE-2002-0627
Published: 2003-01-07
Description: The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via Unicode encoded requests.
CVSS Score: 7.5 (HIGH)
References: http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089; http://www.ciac.org/ciac/bulletins/m-123.shtml; http://www.iss.net/security_center/static/9348.php
CVE: CVE-2002-0628
Published: 2003-01-07
Description: The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-307
References: http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089; http://www.ciac.org/ciac/bulletins/m-123.shtml; http://www.iss.net/security_center/static/9349.php
CVE: CVE-2002-0629
Published: 2003-01-07
Description: The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via multiple connections to the server.
CVSS Score: 5.0 (MEDIUM)
References: http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089; http://www.ciac.org/ciac/bulletins/m-123.shtml; http://www.iss.net/security_center/static/9349.php
CVE: CVE-2002-0630
Published: 2003-01-07
Description: The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via long or malformed ICMP packets.
CVSS Score: 5.0 (MEDIUM)
References: http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089; http://www.ciac.org/ciac/bulletins/m-123.shtml; http://www.iss.net/security_center/static/9350.php
CVE: CVE-2002-1263
Published: 2003-01-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1295.  Reason: This candidate is a reservation duplicate of CVE-2002-1295.  Notes: All CVE users should reference CVE-2002-1295 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2003-0014
Published: 2003-01-11
Description: gsinterf.c in bmv 1.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS Score: 4.6 (MEDIUM)
References: http://packages.debian.org/changelogs/pool/main/b/bmv/bmv_1.2-14.2/changelog; http://secunia.com/advisories/13793; http://secunia.com/advisories/13796
CVE: CVE-2002-1390
Published: 2003-01-17
Description: The daemon for GeneWeb before 4.09 does not properly handle requested paths, which allows remote attackers to read arbitrary files via a crafted URL.
CVSS Score: 5.0 (MEDIUM)
References: http://cristal.inria.fr/~ddr/GeneWeb/en/version/4.09.html; http://www.debian.org/security/2003/dsa-223; http://www.securityfocus.com/bid/6549
CVE: CVE-2002-1391
Published: 2003-01-17
Description: Buffer overflow in cnd-program for mgetty before 1.1.29 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Caller ID string with a long CallerName argument.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-021.0.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6136&w=2; http://search.alphanet.ch/cgi-bin/search.cgi?msgid=[PII_REDACTED]2338.E12094%40greenie.muc.de&max_results=1&type=long&domain=ml-mgetty
CVE: CVE-2002-1392
Published: 2003-01-17
Description: faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges.
CVSS Score: 2.1 (LOW)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-021.0.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6136&w=2; http://search.alphanet.ch/cgi-bin/search.cgi?msgid=[PII_REDACTED]2338.E12094%40greenie.muc.de&max_results=1&type=long&domain=ml-mgetty
CVE: CVE-2002-1393
Published: 2003-01-17
Description: Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute arbitrary commands via (1) URLs, (2) filenames, or (3) e-mail addresses.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000569; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1544&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0397&w=2
CVE: CVE-2002-1394
Published: 2003-01-17
Description: Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.
CVSS Score: 7.5 (HIGH)
References: http://issues.apache.org/bugzilla/show_bug.cgi?id=13365; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4938&w=2; http://marc.info/?l=tomcat-dev&m=[PII_REDACTED]5526&w=2
CVE: CVE-2002-1395
Published: 2003-01-17
Description: Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/8166; http://secunia.com/advisories/8242; http://www.debian.org/security/2002/dsa-202
CVE: CVE-2002-1396
Published: 2003-01-17
Description: Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and before 4.3.0 may allow attackers to cause a denial of service or execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/linux/engarde/2003-q1/0003.html; http://bugs.php.net/bug.php?id=20927; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3192&w=2
CVE: CVE-2002-1397
Published: 2003-01-17
Description: Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow.
CVSS Score: 7.5 (HIGH)
References: http://developer.postgresql.org/cvsweb.cgi/pgsql-server/src/backend/utils/adt/cash.c.diff?r1=1.51&r2=1.52; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4357&w=2
CVE: CVE-2002-1398
Published: 2003-01-17
Description: Buffer overflow in the date parser for PostgreSQL before 7.2.2 allows attackers to cause a denial of service and possibly execute arbitrary code via a long date string, aka a vulnerability "in handling long datetime input."
CVSS Score: 4.6 (MEDIUM)
References: http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2430&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3404&w=2
CVE: CVE-2002-1399
Published: 2003-01-17
Description: Unknown vulnerability in cash_out and possibly other functions in PostgreSQL 7.2.1 and earlier, and possibly later versions before 7.2.3, with unknown impact, based on an invalid integer input which is processed as a different data type, as demonstrated using cash_out(2).
CVSS Score: 10.0 (HIGH)
References: http://archives.postgresql.org/pgsql-hackers/2002-08/msg00708.php; http://archives.postgresql.org/pgsql-hackers/2002-08/msg00713.php; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2430&w=2
CVE: CVE-2002-1400
Published: 2003-01-17
Description: Heap-based buffer overflow in the repeat() function for PostgreSQL before 7.2.2 allows attackers to execute arbitrary code by causing repeat() to generate a large string.
CVSS Score: 7.5 (HIGH)
References: http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9821&w=2
CVE: CVE-2002-1401
Published: 2003-01-17
Description: Buffer overflows in (1) circle_poly, (2) path_encode and (3) path_add (also incorrectly identified as path_addr) for PostgreSQL 7.2.3 and earlier allow attackers to cause a denial of service and possibly execute arbitrary code, possibly as a result of an integer overflow.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://archives.postgresql.org/pgsql-hackers/2002-08/msg02047.php; http://archives.postgresql.org/pgsql-hackers/2002-08/msg02081.php; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524
CVE: CVE-2002-1402
Published: 2003-01-17
Description: Buffer overflows in the (1) TZ and (2) SET TIME ZONE enivronment variables for PostgreSQL 7.2.1 and earlier allow local users to cause a denial of service and possibly execute arbitrary code.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000524; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2725&w=2
CVE: CVE-2002-1403
Published: 2003-01-17
Description: dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
CVSS Score: 7.2 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000549; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9447&w=2; http://www.debian.org/security/2002/dsa-219
CVE: CVE-2003-0001
Published: 2003-01-17
Description: Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0016.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2243&w=2; http://secunia.com/advisories/7996
CVE: CVE-2003-0012
Published: 2003-01-17
Description: The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world-writable permissions for the data/mining directory when it runs, which allows local users to modify or delete the data.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0399&w=2; http://www.debian.org/security/2003/dsa-230; http://www.iss.net/security_center/static/10971.php
CVE: CVE-2003-0013
Published: 2003-01-17
Description: The default .htaccess scripts for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 do not include filenames for backup copies of the localconfig file that are made from editors such as vi and Emacs, which could allow remote attackers to obtain a database password by directly accessing the backup file.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0399&w=2; http://www.debian.org/security/2003/dsa-230; http://www.iss.net/security_center/static/10970.php
CVE: CVE-2003-0025
Published: 2003-01-17
Description: Multiple SQL injection vulnerabilities in IMP 2.2.8 and earlier allow remote attackers to perform unauthorized database activities and possibly gain privileges via certain database functions such as check_prefs() in db.pgsql, as demonstrated using mailbox.php3.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6563&w=2; http://secunia.com/advisories/8087; http://secunia.com/advisories/8177
CVE: CVE-2003-0026
Published: 2003-01-17
Description: Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0250.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000562; http://www.cert.org/advisories/CA-2003-01.html
CVE: CVE-2003-0031
Published: 2003-01-17
Description: Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash).
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000567; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1212&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8573&w=2
CVE: CVE-2003-0032
Published: 2003-01-17
Description: Memory leak in libmcrypt before 2.5.5 allows attackers to cause a denial of service (memory exhaustion) via a large number of requests to the application, which causes libmcrypt to dynamically load algorithms via libtool.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000567; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1212&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8573&w=2
CVE: CVE-2003-1075
Published: 2003-01-27
Description: Unknown vulnerability in the FTP server (in.ftpd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (temporary FTP server hang), which affects other active mode FTP clients.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/7968/; http://sunsolve.sun.com/search/document.do?assetkey=1-26-50240-1; http://www.securityfocus.com/bid/6709
CVE: CVE-2003-1090
Published: 2003-02-06
Description: Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1076&w=2; http://www.kb.cert.org/vuls/id/666073; http://www.osvdb.org/16024