deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-0496
Published: 2003-08-18
Description: Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0013.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7865&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0243&w=2
CVE: CVE-2003-0515
Published: 2003-08-18
Description: SQL injection vulnerabilities in the (1) PostgreSQL or (2) MySQL authentication modules for teapop 0.3.5 and earlier allow attackers to execute arbitrary SQL and possibly gain privileges.
CVSS Score: 7.5 (HIGH)
References: http://www.debian.org/security/2003/dsa-347; http://www.debian.org/security/2003/dsa-347
CVE: CVE-2003-0516
Published: 2003-08-18
Description: cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in (1) caller ID or (2) caller name strings.
CVSS Score: 7.5 (HIGH)
References: ftp://alpha.greenie.net/pub/mgetty/source/1.1/mgetty1.1.29-Nov25.tar.gz; ftp://alpha.greenie.net/pub/mgetty/source/1.1/mgetty1.1.29-Nov25.tar.gz
CVE: CVE-2003-0517
Published: 2003-08-18
Description: faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: ftp://alpha.greenie.net/pub/mgetty/source/1.1/mgetty1.1.29-Nov25.tar.gz; ftp://alpha.greenie.net/pub/mgetty/source/1.1/mgetty1.1.29-Nov25.tar.gz
CVE: CVE-2003-0518
Published: 2003-08-18
Description: The screen saver in MacOS X allows users with physical access to cause the screen saver to crash and gain access to the underlying session via a large number of characters in the password field, possibly triggering a buffer overflow.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-07/0034.html; http://archives.neohapsis.com/archives/bugtraq/2003-07/0187.html; http://docs.info.apple.com/article.html?artnum=120232
CVE: CVE-2003-0519
Published: 2003-08-18
Description: Certain versions of Internet Explorer 5 and 6, in certain Windows environments, allow remote attackers to cause a denial of service (freeze) via a URL to C:\aux (MS-DOS device name) and possibly other devices.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006286.html; http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006286.html
CVE: CVE-2003-0520
Published: 2003-08-18
Description: Trillian 1.0 Pro and 0.74 Freeware allows remote attackers to cause a denial of service (crash) via a TypingUser message in which the "TypingUser" string has been modified.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8026&w=2; http://www.securityfocus.com/bid/8107; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8026&w=2
CVE: CVE-2003-0521
Published: 2003-08-18
Description: Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via script in a URL that is logged but not properly quoted when displayed via the (1) Error Log or (2) Latest Visitors screens.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7616&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7616&w=2
CVE: CVE-2003-0522
Published: 2003-08-18
Description: Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via the idadmin parameter to login.asp or (2) gain other privileges via the Email parameter to Custva.asp.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0031&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8715&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0031&w=2
CVE: CVE-2003-0523
Published: 2003-08-18
Description: Cross-site scripting (XSS) vulnerability in msg.asp for certain versions of ProductCart allow remote attackers to execute arbitrary web script via the message parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6800&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6800&w=2
CVE: CVE-2003-0524
Published: 2003-08-18
Description: Qt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on the qt_plugins_3.0rc temporary file in the .qt directory.
CVSS Score: 6.2 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6906&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6906&w=2
CVE: CVE-2003-0526
Published: 2003-08-18
Description: Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages (1) 500.htm for "500 Internal Server error" or (2) 404.htm for "404 Not Found."
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0029.html; http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0031.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9525&w=2
CVE: CVE-2003-0535
Published: 2003-08-18
Description: Buffer overflow in xbl 1.0k and earlier allows local users to gain privileges via a long -display command line option.
CVSS Score: 7.2 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006386.html; http://www.debian.org/security/2003/dsa-345; http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006386.html
CVE: CVE-2003-0536
Published: 2003-08-18
Description: Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service via .. (dot dot) sequences in the (1) template or (2) lng parameters.
CVSS Score: 3.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3226&w=2; http://sourceforge.net/tracker/index.php?func=detail&aid=670222&group_id=15&atid=100015; http://www.debian.org/security/2003/dsa-346
CVE: CVE-2003-0537
Published: 2003-08-18
Description: The liece Emacs IRC client 2.0+0.20030527 and earlier creates temporary files insecurely, which could allow local users to overwrite arbitrary files as other users.
CVSS Score: 4.6 (MEDIUM)
References: http://www.debian.org/security/2003/dsa-341; http://www.debian.org/security/2003/dsa-341
CVE: CVE-2003-0538
Published: 2003-08-18
Description: The mailcap file for mozart 1.2.5 and earlier causes Oz applications to be passed to the Oz interpreter, which allows remote attackers to execute arbitrary Oz programs in a MIME-aware client program.
CVSS Score: 7.5 (HIGH)
References: http://www.debian.org/security/2003/dsa-342; http://www.debian.org/security/2003/dsa-342
CVE: CVE-2003-0539
Published: 2003-08-18
Description: skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files.
CVSS Score: 4.6 (MEDIUM)
References: http://www.debian.org/security/2003/dsa-343; http://www.redhat.com/support/errata/RHSA-2003-242.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A28
CVE: CVE-2003-0553
Published: 2003-08-18
Description: Buffer overflow in the Client Detection Tool (CDT) plugin (npcdt.dll) for Netscape 7.02 allows remote attackers to execute arbitrary code via an attachment with a long filename.
CVSS Score: 7.5 (HIGH)
References: http://jimmers.russia.webmatrixhosting.net/whitepapers/CDTbug.pdf; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6838&w=2; http://jimmers.russia.webmatrixhosting.net/whitepapers/CDTbug.pdf
CVE: CVE-2003-0554
Published: 2003-08-18
Description: NeoModus Direct Connect 1.0 build 9, and possibly other versions, allows remote attackers to cause a denial of service (connection and possibly memory exhaustion) via a flood of ConnectToMe requests containing arbitrary IP addresses and ports.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006505.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8258&w=2; http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006505.html
CVE: CVE-2003-0555
Published: 2003-08-18
Description: ImageMagick 5.4.3.x and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a "%x" filename, possibly triggering a format string vulnerability.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1599&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1599&w=2
CVE: CVE-2003-0556
Published: 2003-08-18
Description: Polycom MGC 25 allows remote attackers to cause a denial of service (crash) via a large number of "user" requests to the control port 5003, as demonstrated using the blast TCP stress tester.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006494.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3163&w=2; http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006494.html
CVE: CVE-2003-0557
Published: 2003-08-18
Description: SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3384&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3384&w=2
CVE: CVE-2003-0558
Published: 2003-08-18
Description: Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2333&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2333&w=2
CVE: CVE-2003-0559
Published: 2003-08-18
Description: mainfile.php in phpforum 2 RC-1, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by modifying the MAIN_PATH parameter to reference a URL on a remote web server that contains the code.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3729&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3729&w=2
CVE: CVE-2003-0560
Published: 2003-08-18
Description: SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the id parameter.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1084&w=2; http://www.securityfocus.com/bid/8159; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1084&w=2
CVE: CVE-2003-0561
Published: 2003-08-18
Description: Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP banner, or long responses to the client commands (2) USER, (3) PASS, (4) ACCT, and possibly other commands.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0010.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1484&w=2; http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0010.html
CVE: CVE-2003-0567
Published: 2003-08-18
Description: Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006743.html; http://www.cert.org/advisories/CA-2003-15.html; http://www.cert.org/advisories/CA-2003-17.html
CVE: CVE-2003-0572
Published: 2003-08-18
Description: Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause a denial of service (memory consumption).
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20030701-01-P; http://www.osvdb.org/8587; https://exchange.xforce.ibmcloud.com/vulnerabilities/12635
CVE: CVE-2003-0573
Published: 2003-08-18
Description: The DNS callbacks in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, do not perform sufficient sanity checking, with unknown impact.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20030701-01-P; ftp://patches.sgi.com/support/free/security/advisories/20030701-01-P
CVE: CVE-2003-0574
Published: 2003-08-18
Description: Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local users to cause a core dump in scheme and possibly gain privileges via certain environment variables, a different vulnerability than CVE-2001-0797 and CVE-1999-0028.
CVSS Score: 7.2 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20030702-01-P; ftp://patches.sgi.com/support/free/security/advisories/20030702-01-P
CVE: CVE-2003-0577
Published: 2003-08-18
Description: mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-002.0/CSSA-2004-002.0.txt; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000695; http://secunia.com/advisories/7875
CVE: CVE-2003-0578
Published: 2003-08-18
Description: cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users to gain privileges by deleting and overwriting arbitrary files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0025.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4682&w=2; http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0025.html
CVE: CVE-2003-0579
Published: 2003-08-18
Description: uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and execute the uv.install program, which allows local users to gain privileges by providing a pathname that is under control of the user.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0026.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2337&w=2; http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0026.html
CVE: CVE-2003-0580
Published: 2003-08-18
Description: Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0028.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3476&w=2; http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0028.html
CVE: CVE-2003-0581
Published: 2003-08-18
Description: X Fontserver for Truetype fonts (xfstt) 1.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a (1) FS_QueryXExtents8 or (2) FS_QueryXBitmaps8 packet, and possibly other types of packets, with a large num_ranges value, which causes an out-of-bounds array access.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5446&w=2; http://www.debian.org/security/2003/dsa-360; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5446&w=2
CVE: CVE-2003-0583
Published: 2003-08-18
Description: Buffer overflow in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via a long command line argument.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8846&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8846&w=2
CVE: CVE-2003-0584
Published: 2003-08-18
Description: Format string vulnerability in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8846&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8846&w=2
CVE: CVE-2003-0585
Published: 2003-08-18
Description: SQL injection vulnerability in login.asp of Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to bypass authentication and execute arbitrary SQL code via the (1) user or (2) pass parameters.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3616&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3616&w=2
CVE: CVE-2003-0586
Published: 2003-08-18
Description: Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3616&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3616&w=2
CVE: CVE-2003-0587
Published: 2003-08-18
Description: Cross-site scripting (XSS) vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.x allows remote authenticated users to execute arbitrary web script and gain administrative access via the "displayed name" attribute of the "ubber" cookie.
CVSS Score: 6.9 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5934&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5934&w=2
CVE: CVE-2003-0588
Published: 2003-08-18
Description: admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2993&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2993&w=2
CVE: CVE-2003-0589
Published: 2003-08-18
Description: admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2993&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2993&w=2
CVE: CVE-2003-0590
Published: 2003-08-18
Description: Cross-site scripting (XSS) vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon (image_subject) field.
CVSS Score: 7.1 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9609&w=2; http://members.fortunecity.it/lethalman2002/bugs/splatt.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9609&w=2
CVE: CVE-2003-1202
Published: 2003-08-19
Description: The checklogin function in omail.pl for omail webmail 0.98.4 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) password, (2) domainname, or (3) username.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8641&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9042&w=2; http://secunia.com/advisories/9585
CVE: CVE-2003-1063
Published: 2003-08-20
Description: The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy.
CVSS Score: 7.5 (HIGH)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-56300-1; http://www.ciac.org/ciac/bulletins/n-134.shtml; http://www.securityfocus.com/bid/8461
CVE: CVE-2002-1566
Published: 2003-08-27
Description: netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=vuln-dev&m=[PII_REDACTED]2256&w=2; http://www.securityfocus.com/bid/5680; https://exchange.xforce.ibmcloud.com/vulnerabilities/10081
CVE: CVE-2003-0148
Published: 2003-08-27
Description: The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that (1) obtain the database administrator username and encrypted password in a configuration file from the ePO server using a certain request, (2) crack the password due to weak cryptography, and (3) use the password to pass commands through xp_cmdshell.
CVSS Score: 7.2 (HIGH)
References: http://www.atstake.com/research/advisories/2003/a073103-1.txt; http://www.nai.com/us/promos/mcafee/epo_vulnerabilities.asp; http://www.atstake.com/research/advisories/2003/a073103-1.txt
CVE: CVE-2003-0149
Published: 2003-08-27
Description: Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters.
CVSS Score: 7.5 (HIGH)
References: http://www.atstake.com/research/advisories/2003/a073103-1.txt; http://www.nai.com/us/promos/mcafee/epo_vulnerabilities.asp; http://www.atstake.com/research/advisories/2003/a073103-1.txt
CVE: CVE-2003-0187
Published: 2003-08-27
Description: The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows remote attackers to cause a denial of service (resource consumption) due to an inconsistency with Linux 2.4.20's support of linked lists, which causes Netfilter to fail to identify connections with an UNCONFIRMED status and use large timeouts.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6824&w=2; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A260; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6824&w=2
CVE: CVE-2003-0230
Published: 2003-08-27
Description: Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/556356; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-031; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A235
CVE: CVE-2003-0231
Published: 2003-08-27
Description: Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.
CVSS Score: 5.0 (MEDIUM)
References: http://www.atstake.com/research/advisories/2003/a072303-2.txt; http://www.kb.cert.org/vuls/id/918652; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-031
CVE: CVE-2003-0232
Published: 2003-08-27
Description: Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow.
CVSS Score: 7.2 (HIGH)
References: http://www.atstake.com/research/advisories/2003/a072303-3.txt; http://www.kb.cert.org/vuls/id/584868; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-031
CVE: CVE-2003-0346
Published: 2003-08-27
Description: Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with (1) large length for a Text or Copyright string, or (2) a large number of tracks, which leads to a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4008&w=2; http://www.cert.org/advisories/CA-2003-18.html; http://www.kb.cert.org/vuls/id/265232
CVE: CVE-2003-0353
Published: 2003-08-27
Description: Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7778&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]7953&w=2; http://www.securityfocus.com/bid/8455