deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-1010
Published: 2004-03-29
Description: Unknown vulnerability in fs_usage in Mac OS X 10.2.8 and 10.3.2 and Mac OS X Server 10.2.8 and 10.3.2 allows local users to gain privileges via unknown attack vectors.
CVSS Score: 4.6 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=61798; http://www.securityfocus.com/bid/9265; https://exchange.xforce.ibmcloud.com/vulnerabilities/14193
CVE: CVE-2003-1011
Published: 2004-03-29
Description: Apple Mac OS X 10.0 through 10.2.8 allows local users with a USB keyboard to gain unauthorized access by holding down the CTRL and C keys when the system is booting, which crashes the init process and leaves the user in a root shell.
CVSS Score: 7.2 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=61798; http://www.securityfocus.com/archive/1/343087; http://www.securityfocus.com/bid/8945
CVE: CVE-2003-1018
Published: 2004-03-29
Description: Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors.
CVSS Score: 7.2 (HIGH)
References: http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-20; http://www.securityfocus.com/bid/9254; https://exchange.xforce.ibmcloud.com/vulnerabilities/14037
CVE: CVE-2004-0113
Published: 2004-03-29
Description: Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000839; http://issues.apache.org/bugzilla/show_bug.cgi?id=27106; http://marc.info/?l=apache-cvs&m=[PII_REDACTED]9638
CVE: CVE-2004-0126
Published: 2004-03-29
Description: The jail_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/write privileges to files and directories within another jail.
CVSS Score: 4.6 (MEDIUM)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:03.jail.asc; http://www.osvdb.org/4101; http://www.securityfocus.com/bid/9762
CVE: CVE-2004-0158
Published: 2004-03-29
Description: Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, or (7) main.c.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5356&w=2; http://security.debian.org/pool/updates/main/l/lbreakout2/lbreakout2_2.2.2-1woody1.diff.gz; http://www.debian.org/security/2004/dsa-445
CVE: CVE-2004-0160
Published: 2004-03-29
Description: Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file.
CVSS Score: 7.2 (HIGH)
References: http://www.debian.org/security/2004/dsa-446; http://www.securityfocus.com/bid/9713; https://exchange.xforce.ibmcloud.com/vulnerabilities/15279
CVE: CVE-2004-0194
Published: 2004-03-29
Description: Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to execute arbitrary code via a PDF document with XML Forms Data Format (XFDF) data.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018227.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2724&w=2; http://www.nextgenss.com/advisories/adobexfdf.txt
CVE: CVE-2004-1870
Published: 2004-03-29
Description: Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the (1) photo parameter to addfav.php, (2) photo parameter to comments.php, (3) credit parameter to comments.php, (4) cat parameter to index.php, (5) ppuser parameter to showgallery.php, (6) cat parameter to showgallery.php, (7) cat parameter to uploadphoto.php, (8) albumid parameter to useralbums.php, or (9) albumid parameter to useralbums.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3123&w=2; http://secunia.com/advisories/11241; http://securitytracker.com/id?1009571
CVE: CVE-2004-1871
Published: 2004-03-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ppuser, (2) password, (3) stype, (4) perpage, (5) sort, (6) page, (7) si, or (8) cat parameters to showmembers.php, or the (9) photo name, (10) photo description, (11) album name, or (12) album description fields.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3123&w=2; http://secunia.com/advisories/11241; http://securitytracker.com/id?1009571
CVE: CVE-2004-1872
Published: 2004-03-29
Description: Cross-site scripting (XSS) vulnerability in WebCT Campus Edition 4.1.1.5 allows remote attackers to inject arbitrary web script or HTML via the @import URL function in a CSS style tag.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6365&w=2; http://secunia.com/advisories/11242; http://www.securityfocus.com/bid/9999
CVE: CVE-2004-1874
Published: 2004-03-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) deliver.asp and (2) billing.asp in A-CART Pro and A-CART 2.0 allow remote attackers to inject arbitrary web script or HTML via the user information forms.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8983&w=2; http://secunia.com/advisories/11236; http://www.securityfocus.com/bid/9997
CVE: CVE-2004-1875
Published: 2004-03-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to testfile.html, (2) file parameter to erredit.html, (3) dns parameter to dnslook.html, (4) account parameter to ignorelist.html, (5) account parameter to showlog.html, (6) db parameter to repairdb.html, (7) login parameter to doaddftp.html (8) account parameter to editmsg.htm, or (9) ip parameter to del.html.  NOTE: the dnslook.html vector was later reported to exist in cPanel 10.
CVSS Score: 9.3 (HIGH)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8676&w=2; http://secunia.com/advisories/11244; http://secunia.com/advisories/22984
CVE: CVE-2004-1876
Published: 2004-03-30
Description: The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon (clamd) before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8615&w=2; http://secunia.com/advisories/11253; http://security.gentoo.org/glsa/glsa-200405-03.xml
CVE: CVE-2004-1877
Published: 2004-03-30
Description: The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password.
CVSS Score: 2.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2235&w=2; http://www.securityfocus.com/bid/10009; https://exchange.xforce.ibmcloud.com/vulnerabilities/15676
CVE: CVE-2004-1878
Published: 2004-03-30
Description: LINBOX LIN:BOX allows remote attackers to bypass authentication, obtain sensitive information, or gain access via a direct request to admin/user.pl preceded by // (double leading slash).
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1673&w=2; http://secunia.com/advisories/11264; http://www.securityfocus.com/bid/10010
CVE: CVE-2004-1890
Published: 2004-04-02
Description: Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (hang) via the PORT mode.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc; http://www.securityfocus.com/bid/10037; https://exchange.xforce.ibmcloud.com/vulnerabilities/15723
CVE: CVE-2004-1986
Published: 2004-04-04
Description: Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the startdir parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2014&w=2; http://secunia.com/advisories/11524; http://securitytracker.com/id?1010001
CVE: CVE-2004-1357
Published: 2004-04-07
Description: The Secure Shell (SSH) Daemon (SSHD) in Sun Solaris 9 does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0, which makes it easier for remote attackers to hide the source of their activities.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/11316/; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57538-1; http://www.auscert.org.au/render.html?it=4003
CVE: CVE-2004-1915
Published: 2004-04-08
Description: Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments.
CVSS Score: 7.5 (HIGH)
References: http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9810&w=2; http://secunia.com/advisories/11333
CVE: CVE-2004-1916
Published: 2004-04-08
Description: Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.
CVSS Score: 7.5 (HIGH)
References: http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5229&w=2; http://secunia.com/advisories/11333
CVE: CVE-2004-1917
Published: 2004-04-08
Description: Format string vulnerability in test_func_func in LCDProc 0.4.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the str variable.
CVSS Score: 7.5 (HIGH)
References: http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5229&w=2; http://secunia.com/advisories/11333
CVE: CVE-2004-1918
Published: 2004-04-09
Description: RSniff 1.0 allows remote attackers to cause a denial of service (connection exhaustion) via a large number of connections with a command other than AUTHENTICATE, or without any data, which prevents the socket from being closed properly.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/rsniff-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4665&w=2; http://secunia.com/advisories/11339
CVE: CVE-2004-1919
Published: 2004-04-09
Description: The hash_strcmp function in hasch.c in Crackalaka 1.0.8 allows remote attackers to cause a denial of service (crash) via large malformed strings.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6967&w=2; http://secunia.com/advisories/11340; http://www.securityfocus.com/bid/10092
CVE: CVE-2004-1920
Published: 2004-04-10
Description: X-Micro WLAN 11b Broadband Router 1.2.2, 1.2.2.3, 1.2.2.4, and 1.6.0.0 has a hardcoded "super" username and password, which could allow remote attackers to gain access.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9947&w=2; http://secunia.com/advisories/11342; http://www.securityfocus.com/bid/10095
CVE: CVE-2004-1921
Published: 2004-04-10
Description: X-Micro WLAN 11b Broadband Router 1.6.0.1 has a hardcoded "1502" username and password, which could allow remote attackers to gain access.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1111&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9855&w=2; http://secunia.com/advisories/11342
CVE: CVE-2004-1922
Published: 2004-04-11
Description: Microsoft Internet Explorer 5.5 and 6.0 allocates memory based on the memory size written in the BMP file instead of the actual BMP file size, which allows remote attackers to cause a denial of service (memory consumption) via a small BMP file with has a large memory size.
CVSS Score: 2.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7872&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7872&w=2
CVE: CVE-2004-1923
Published: 2004-04-11
Description: Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to (1) banner_click.php, (2) categorize.php, (3) tiki-admin_include_directory.php, (4) tiki-directory_search.php, which reveal the web server path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6947&w=2; http://secunia.com/advisories/11344; http://tikiwiki.org/tiki-read_article.php?articleId=66
CVE: CVE-2004-1924
Published: 2004-04-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via via the (1) theme parameter to tiki-switch_theme.php, (2) find and priority parameters to messu-mailbox.php, (3) flag, priority, flagval, sort_mode, or find parameters to messu-read.php, (4) articleId parameter to tiki-read_article.php, (5) parentId parameter to tiki-browse_categories.php, (6) comments_threshold parameter to tiki-index.php (7) articleId parameter to tiki-print_article.php, (8) galleryId parameter to tiki-list_file_gallery.php, (9) galleryId parameter to tiki-upload_file.php, (10) faqId parameter to tiki-view_faq.php, (11) chartId parameter to tiki-view_chart.php, or (12) surveyId parameter to tiki-survey_stats_survey.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6947&w=2; http://secunia.com/advisories/11344; http://tikiwiki.org/tiki-read_article.php?articleId=66
CVE: CVE-2004-1926
Published: 2004-04-11
Description: Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code via the (1) Theme, (2) Country, (3) Real Name, or (4) Displayed time zone fields in a User Profile, or the (5) Name, (6) Description, (7) URL, or (8) Country fields in a Directory/Add Site operation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6947&w=2; http://secunia.com/advisories/11344; http://tikiwiki.org/tiki-read_article.php?articleId=66
CVE: CVE-2004-1927
Published: 2004-04-11
Description: Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. (dot dot) sequences in the mapfile parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6947&w=2; http://secunia.com/advisories/11344; http://tikiwiki.org/tiki-read_article.php?articleId=66
CVE: CVE-2004-1060
Published: 2004-04-12
Description: Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.4/SCOSA-2006.4.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4255&w=2; http://secunia.com/advisories/18317
CVE: CVE-2004-1925
Published: 2004-04-12
Description: Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sort_mode parameter in (1) tiki-usermenu.php, (2) tiki-list_file_gallery.php, (3) tiki-directory_ranking.php, (4) tiki-browse_categories.php, (5) tiki-index.php, (6) tiki-user_tasks.php, (7) tiki-directory_ranking.php, (8) tiki-directory_search.php, (9) tiki-file_galleries.php, (10) tiki-list_faqs.php, (11) tiki-list_trackers.php, (12) tiki-list_blogs.php, or via the offset parameter in (13) tiki-usermenu.php, (14) tiki-browse_categories.php, (15) tiki-index.php, (16) tiki-user_tasks.php, (17) tiki-list_faqs.php, (18) tiki-list_trackers.php, or (19) tiki-list_blogs.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6947&w=2; http://secunia.com/advisories/11344; http://tikiwiki.org/tiki-read_article.php?articleId=66
CVE: CVE-2004-1928
Published: 2004-04-12
Description: The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wiki_up URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6947&w=2; http://secunia.com/advisories/11344; http://tikiwiki.org/tiki-read_article.php?articleId=66
CVE: CVE-2004-1930
Published: 2004-04-12
Description: Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, when themes are used, allows remote attackers to inject arbitrary web script or HTML via a base64-encoded user parameter or cookie.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4035&w=2; http://secunia.com/advisories/11347; http://www.securityfocus.com/bid/10128
CVE: CVE-2004-1932
Published: 2004-04-12
Description: SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL code and create an administrator account via base64-encoded SQL in the admin parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8576&w=2; http://www.waraxe.us/index.php?modname=sa&id=18; https://exchange.xforce.ibmcloud.com/vulnerabilities/15835
CVE: CVE-2004-1933
Published: 2004-04-12
Description: Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and read unauthorized messages.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8804&w=2; http://www.securityfocus.com/bid/10102; https://exchange.xforce.ibmcloud.com/vulnerabilities/15850
CVE: CVE-2004-1756
Published: 2004-04-13
Description: BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejects it, which allows remote attackers to spoof other users or servers.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_54.00.jsp; http://secunia.com/advisories/11358; http://securitytracker.com/id?1009765
CVE: CVE-2004-1758
Published: 2004-04-13
Description: BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in config.xml, which allows local users to gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_53.00.jsp; http://secunia.com/advisories/11357; http://securitytracker.com/id?1009764
CVE: CVE-2004-1929
Published: 2004-04-13
Description: SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code into the user parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6852&w=2; http://secunia.com/advisories/11347; http://www.securityfocus.com/bid/10135
CVE: CVE-2004-1936
Published: 2004-04-14
Description: ZoneAlarm Pro 4.5.538.001 and possibly other versions allows remote attackers to bypass e-mail protection via attachments whose names contain certain non-English characters.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1251&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9417&w=2; http://www.securityfocus.com/bid/10148
CVE: CVE-2004-1939
Published: 2004-04-14
Description: Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encoded slashes (%252F) in the key parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2681&w=2; http://secunia.com/advisories/11388; http://www.securiteam.com/windowsntfocus/5EP0I15CKK.html
CVE: CVE-2004-1944
Published: 2004-04-14
Description: Eudora 6.1 and 6.0.3 for Windows allows remote attackers to cause a denial of service (crash) via a deeply nested multipart MIME message.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020075.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7321&w=2; http://secunia.com/advisories/11360
CVE: CVE-2002-1576
Published: 2004-04-15
Description: lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9796&w=2; http://www.sapdb.org/sap_db_alert.htm; http://www.securityfocus.com/bid/6316
CVE: CVE-2002-1577
Published: 2004-04-15
Description: SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the (1) SAP*, (2) SAPCPIC, (3) DDIC, (4) EARLYWATCH, or (5) TMSADM accounts.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8119&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/9964; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8119&w=2
CVE: CVE-2002-1578
Published: 2004-04-15
Description: The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0387.html; http://www.securityfocus.com/bid/4613; https://exchange.xforce.ibmcloud.com/vulnerabilities/8972
CVE: CVE-2002-1579
Published: 2004-04-15
Description: SAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a connection to a high-numbered port, which generates an "unknown connection data" error.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-01/0334.html; http://www.securityfocus.com/bid/3972; https://exchange.xforce.ibmcloud.com/vulnerabilities/8007
CVE: CVE-2003-0202
Published: 2004-04-15
Description: The (1) halstead and (2) gather_stats scripts in metrics 1.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS Score: 4.6 (MEDIUM)
References: http://www.debian.org/security/2003/dsa-279; http://www.securityfocus.com/bid/7293; https://exchange.xforce.ibmcloud.com/vulnerabilities/11734
CVE: CVE-2003-0257
Published: 2004-04-15
Description: Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or root privileges.
CVSS Score: 7.2 (HIGH)
References: http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2003.0660.1; https://exchange.xforce.ibmcloud.com/vulnerabilities/12000; http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2003.0660.1