deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-0689
Published: 2003-10-20
Description: The getgrouplist function in GNU libc (glibc) 2.2.4 and earlier allows attackers to cause a denial of service (segmentation fault) and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow.
CVSS Score: 7.5 (HIGH)
References: http://www.redhat.com/support/errata/RHSA-2003-249.html; http://www.redhat.com/support/errata/RHSA-2003-325.html; http://www.redhat.com/support/errata/RHSA-2003-249.html
CVE: CVE-2003-0702
Published: 2003-10-20
Description: Unknown vulnerability in an ISAPI plugin for ISS Server Sensor 7.0 XPU 20.16, 20.18, and possibly other versions before 20.19, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code in Internet Information Server (IIS) via a certain URL through SSL.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5389&w=2; http://www.enteredge.com/research/CAN-2003-0702.asp; https://exchange.xforce.ibmcloud.com/vulnerabilities/13088
CVE: CVE-2003-0707
Published: 2003-10-20
Description: Buffer overflow in LinuxNode (node) before 0.3.2 allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://www.debian.org/security/2003/dsa-375; http://www.debian.org/security/2003/dsa-375
CVE: CVE-2003-0708
Published: 2003-10-20
Description: Format string vulnerability in LinuxNode (node) before 0.3.2 may allow attackers to cause a denial of service or execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://www.debian.org/security/2003/dsa-375; http://www.debian.org/security/2003/dsa-375
CVE: CVE-2003-0709
Published: 2003-10-20
Description: Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option.
CVSS Score: 7.5 (HIGH)
References: http://www.zone-h.org/en/advisories/read/id=2925/; http://www.zone-h.org/en/advisories/read/id=2925/
CVE: CVE-2003-0723
Published: 2003-10-20
Description: Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://www.mandriva.com/security/advisories?name=MDKSA-2003:087; http://www.mandriva.com/security/advisories?name=MDKSA-2003:087
CVE: CVE-2003-0724
Published: 2003-10-20
Description: ssh on HP Tru64 UNIX 5.1B and 5.1A does not properly handle RSA signatures when digital certificates and RSA keys are used, which could allow local and remote attackers to gain privileges.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/advisories/5736; http://www.securityfocus.com/bid/8492; http://www.securityfocus.com/advisories/5736
CVE: CVE-2003-0725
Published: 2003-10-20
Description: Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0087.html; http://lists.immunitysec.com/pipermail/dailydave/2003-August/000030.html; http://www.kb.cert.org/vuls/id/934932
CVE: CVE-2003-0726
Published: 2003-10-20
Description: RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is executed in the security context of the previously loaded URL, as demonstrated using a "javascript:" URL in the area tag.
CVSS Score: 5.1 (MEDIUM)
References: http://securitytracker.com/id?1007532; http://www.digitalpranksters.com/advisories/realnetworks/smilscriptprotocol.html; http://www.securityfocus.com/archive/1/335293
CVE: CVE-2003-0727
Published: 2003-10-20
Description: Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.
CVSS Score: 2.1 (LOW)
References: http://otn.oracle.com/deploy/security/pdf/2003Alert58.pdf; https://www.exploit-db.com/exploits/42780/; http://otn.oracle.com/deploy/security/pdf/2003Alert58.pdf
CVE: CVE-2003-0728
Published: 2003-10-20
Description: Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1567&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0987&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1567&w=2
CVE: CVE-2003-0729
Published: 2003-10-20
Description: Buffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a TFTP request with a long filename.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0091.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5545&w=2; http://www.securiteam.com/windowsntfocus/5RP0M1PAUM.html
CVE: CVE-2003-0730
Published: 2003-10-20
Description: Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflow attacks.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-015.txt.asc; ftp://patches.sgi.com/support/free/security/advisories/20031101-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821
CVE: CVE-2003-0731
Published: 2003-10-20
Description: CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter.
CVSS Score: 10.0 (HIGH)
References: http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml; http://www.securityfocus.com/archive/1/333028; http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml
CVE: CVE-2003-0732
Published: 2003-10-20
Description: CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages.
CVSS Score: 10.0 (HIGH)
References: http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml; http://www.securityfocus.com/archive/1/333028; http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml
CVE: CVE-2003-0733
Published: 2003-10-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary web script and steal authentication credentials via (1) a forward instruction to the Servlet container or (2) other vulnerabilities in the WebLogic Server console application.
CVSS Score: 6.8 (MEDIUM)
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/SA_BEA03_36.00.jsp; http://www.securityfocus.com/bid/8357; http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/SA_BEA03_36.00.jsp
CVE: CVE-2003-0734
Published: 2003-10-20
Description: Unknown vulnerability in the pam_filter mechanism in pam_ldap before version 162, when LDAP based authentication is being used, allows users to bypass host-based access restrictions and log onto the system.
CVSS Score: 10.0 (HIGH)
References: http://www.mandriva.com/security/advisories?name=MDKSA-2003:088; http://www.mandriva.com/security/advisories?name=MDKSA-2003:088
CVE: CVE-2003-0735
Published: 2003-10-20
Description: SQL injection vulnerability in the Calendar module of phpWebSite 0.9.x and earlier allows remote attackers to execute arbitrary SQL queries, as demonstrated using the year parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1496&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2715&w=2; http://www.kb.cert.org/vuls/id/925166
CVE: CVE-2003-0736
Published: 2003-10-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script via (1) the day parameter in the calendar module, (2) the fatcat_id parameter in the fatcat module, (3) the PAGE_id parameter in the pagemaster module, (4) the PDA_limit parameter in the search, and (5) possibly other parameters in the calendar, fatcat, and pagemaster modules.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1496&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2715&w=2; http://www.kb.cert.org/vuls/id/664422
CVE: CVE-2003-0737
Published: 2003-10-20
Description: The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to obtain the full pathname of phpWebSite via an invalid year, which generates an error from localtime() in TimeZone.php of the Pear library.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1496&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2715&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1496&w=2
CVE: CVE-2003-0738
Published: 2003-10-20
Description: The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to cause a denial of service (crash) via a long year parameter.
CVSS Score: 7.8 (HIGH)
CWE: CWE-134
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1496&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2715&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1496&w=2
CVE: CVE-2003-0739
Published: 2003-10-20
Description: VMware Workstation 4.0.1 for Linux, build 5289 and earlier, allows local users to delete arbitrary files via a symlink attack.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5023&w=2; http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=1106; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5023&w=2
CVE: CVE-2003-0740
Published: 2003-10-20
Description: Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users to hijack the Stunnel server.
CVSS Score: 4.6 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000736; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1958&w=2; http://www.mandriva.com/security/advisories?name=MDKSA-2003:108
CVE: CVE-2003-0743
Published: 2003-10-20
Description: Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed before the "(no argument given)" string is appended to the buffer.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000735; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0395&w=2; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]0334&w=2
CVE: CVE-2003-0744
Published: 2003-10-20
Description: The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service (process hang and termination) via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/; http://leafnode.sourceforge.net/leafnode-SA-2003-01.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0736&w=2
CVE: CVE-2003-0745
Published: 2003-10-20
Description: SNMPc 6.0.8 and earlier performs authentication to the server on the client side, which allows remote attackers to gain privileges by decrypting the password that is returned by the server.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2003-08/0340.html; http://archives.neohapsis.com/archives/bugtraq/2003-08/0340.html
CVE: CVE-2003-0746
Published: 2003-10-20
Description: Various Distributed Computing Environment (DCE) implementations, including HP OpenView, allow remote attackers to cause a denial of service (process hang or termination) via certain malformed inputs, as triggered by attempted exploits against the vulnerabilities CVE-2003-0352 or CVE-2003-0605, such as the Blaster/MSblast/LovSAN worm.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20030902-01-P; http://archives.neohapsis.com/archives/hp/2003-q3/0042.html; http://www.kb.cert.org/vuls/id/377804
CVE: CVE-2003-0747
Published: 2003-10-20
Description: wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters (1) ~service, (2) ~templatelanguage, (3) ~language, (4) ~theme, or (5) ~template, which leaks the information in the resulting error message.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.html; http://www.securityfocus.com/bid/8515; https://exchange.xforce.ibmcloud.com/vulnerabilities/13063
CVE: CVE-2003-0748
Published: 2003-10-20
Description: Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the ~theme parameter and a ~template parameter with a filename followed by space characters, which can prevent SAP from effectively adding a .html extension to the filename.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.html; http://www.securityfocus.com/bid/8516; https://exchange.xforce.ibmcloud.com/vulnerabilities/13066
CVE: CVE-2003-0749
Published: 2003-10-20
Description: Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal cookies via the ~service parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.html; http://www.securityfocus.com/bid/8517; http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.html
CVE: CVE-2003-0750
Published: 2003-10-20
Description: secure.php in PY-Membres 4.2 and earlier allows remote attackers to bypass authentication by setting the adminpy parameter.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0089.html; http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0089.html
CVE: CVE-2003-0751
Published: 2003-10-20
Description: SQL injection vulnerability in pass_done.php for PY-Membres 4.2 and earlier allows remote attackers to execute arbitrary SQL queries via the email parameter.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0089.html; http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0089.html
CVE: CVE-2003-0752
Published: 2003-10-20
Description: SQL injection vulnerability in global.php3 of AttilaPHP 3.0, and possibly earlier versions, allows remote attackers to bypass authentication via a modified cook_id parameter.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0090.html; http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0090.html
CVE: CVE-2003-0753
Published: 2003-10-20
Description: nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphp_config[LangFile] parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-08/0345.html; http://archives.neohapsis.com/archives/bugtraq/2003-08/0345.html
CVE: CVE-2003-0754
Published: 2003-10-20
Description: nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is used for authentication.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2003-08/0345.html; http://archives.neohapsis.com/archives/bugtraq/2003-08/0345.html
CVE: CVE-2003-0755
Published: 2003-10-20
Description: Buffer overflow in sys_cmd.c for gtkftpd 1.0.4 and earlier allows remote attackers to execute arbitrary code by creating long directory names and listing them with a LIST command.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/vuln-dev/2003-q3/0101.html; http://archives.neohapsis.com/archives/vuln-dev/2003-q3/0101.html
CVE: CVE-2003-0756
Published: 2003-10-20
Description: Directory traversal vulnerability in sitebuilder.cgi in SiteBuilder 1.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the selectedpage parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-09/0011.html; http://archives.neohapsis.com/archives/bugtraq/2003-09/0011.html
CVE: CVE-2003-0757
Published: 2003-10-20
Description: Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemote requests to TCP ports 256 or 264, which leaks the IP addresses in a reply packet.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-09/0018.html; http://archives.neohapsis.com/archives/bugtraq/2003-09/0018.html
CVE: CVE-2003-1136
Published: 2003-10-23
Description: Cross-site scripting (XSS) vulnerability in Chi Kien Uong Guestbook 1.51 allows remote attackers to inject arbitrary web script or HTML via (1) HTML in a posted message or (2) Javascript in an onmouseover attribute in an e-mail address or URL.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/10080; http://securitytracker.com/id?1008006; http://www.osvdb.org/2718
CVE: CVE-2003-1148
Published: 2003-10-25
Description: Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allow remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter to (1) config.inc.php or (2) new-visitor.inc.php in common/visiteurs/include/.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2003-10/0262.html; http://secunia.com/advisories/10079; http://securitytracker.com/id?1008011
CVE: CVE-2003-1181
Published: 2003-10-25
Description: Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request to info.php, which invokes the phpinfo() function.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0019.html; http://secunia.com/advisories/10068; http://www.osvdb.org/3292
CVE: CVE-2003-1060
Published: 2003-10-27
Description: The NFS Server for Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (UFS panic) via certain invalid UFS requests, which triggers a null dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-57406-1; http://www.securityfocus.com/bid/8929; https://exchange.xforce.ibmcloud.com/vulnerabilities/13547
CVE: CVE-2003-1137
Published: 2003-10-27
Description: Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that contains an asterisk (*) wildcard character.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/342473; http://www.securityfocus.com/archive/1/342766; http://www.securityfocus.com/bid/8897
CVE: CVE-2003-1138
Published: 2003-10-27
Description: The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash (//).
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/342578; http://www.securityfocus.com/bid/8898; http://www.securityfocus.com/archive/1/342578
CVE: CVE-2003-1139
Published: 2003-10-27
Description: Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0021.html; http://secunia.com/advisories/10104; http://securitytracker.com/id?1008014
CVE: CVE-2003-1140
Published: 2003-10-27
Description: Buffer overflow in Musicqueue 1.2.0 allows local users to execute arbitrary code via a long language variable in the configuration file.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0021.html; http://secunia.com/advisories/10104; http://securitytracker.com/id?1008014
CVE: CVE-2003-1149
Published: 2003-10-27
Description: Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked site, which is displayed on the blocked sites error page.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/10067; http://securityresponse.symantec.com/avcenter/security/Content/2003.10.27.html; http://www.osvdb.org/2714
CVE: CVE-2003-1150
Published: 2003-10-27
Description: Buffer overflow in the portmapper service (PMAP.NLM) in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/10100; http://support.novell.com/cgi-bin/search/searchtid.cgi?/10088194.htm; http://www.securityfocus.com/bid/8907
CVE: CVE-2003-1151
Published: 2003-10-28
Description: Cross-site scripting (XSS) vulnerability in Fastream NETFile Server 6.0.3.588 allows remote attackers to inject arbitrary web script or HTML via the URL, which is displayed on a "404 Not Found" error page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/10099; http://securitytracker.com/id?1008020; http://www.osvdb.org/2732
CVE: CVE-2003-1183
Published: 2003-10-28
Description: The WebCache component in Oracle Files 9.0.3.1.0, 9.0.3.2.0, and 9.0.3.3.0 of Oracle Collaboration Suite Release 1 caches files despite the cacheability rules imposed by Oracle Files, which allows local users to gain access.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/10088; http://www.oracle.com/technology/deploy/security/pdf/2003alert60.pdf; http://www.osvdb.org/2727
CVE: CVE-2003-1186
Published: 2003-10-29
Description: Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to execute arbitrary code via a long HTTP Referer header.
CVSS Score: 7.5 (HIGH)
References: http://www.osvdb.org/10101; http://www.securityfocus.com/archive/1/342785; http://www.securityfocus.com/bid/8925
CVE: CVE-2003-1189
Published: 2003-10-29
Description: Unknown vulnerability in Nokia IPSO 3.7, configured as IP Clusters, allows remote attackers to cause a denial of service via unknown attack vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/10083; http://securitytracker.com/id?1007992; http://www.osvdb.org/2724
CVE: CVE-2003-1191
Published: 2003-10-29
Description: chatbox.php in e107 0.554 and 0.603 allows remote attackers to cause a denial of service (pages fail to load) via HTML in the Name field, which prevents the main.php form from being loaded.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-10/0313.html; http://secunia.com/advisories/10115; http://www.hackingheaven.com/index.php?name=PNphpBB2&file=viewtopic&t=21
CVE: CVE-2003-1143
Published: 2003-10-30
Description: Croteam Serious Sam demo test 2 2.1a, Serious Sam: the First Encounter 1.05, and Serious Sam: the Second Encounter 1.05 allow remote attackers to cause a denial of service (crash or freeze) via a TCP packet with an invalid first parameter.
CVSS Score: 7.5 (HIGH)
References: http://aluigi.altervista.org/adv/ssboom-adv.txt; http://www.securityfocus.com/archive/1/342957; http://www.securityfocus.com/bid/8936