deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-1534
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) aim, (4) yim, (5) location, and (6) comment variables.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/8475; http://securityreason.com/securityalert/3347; http://www.securityfocus.com/archive/1/316745/30/25280/threaded
CVE: CVE-2003-1535
Published: 2003-12-31
Description: Justice Guestbook 1.3 allows remote attackers to obtain the full installation path via a direct request to cfooter.php3, which leaks the path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/8475; http://securityreason.com/securityalert/3347; http://www.securityfocus.com/archive/1/316745/30/25280/threaded
CVE: CVE-2003-1536
Published: 2003-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to inject arbitrary web script or HTML via (1) the q parameter to search.php and (2) the year parameter to calendar.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html; http://secunia.com/advisories/8358; http://www.osvdb.org/7021
CVE: CVE-2003-1537
Published: 2003-12-31
Description: Directory traversal vulnerability in PostNuke 0.723 and earlier allows remote attackers to include arbitrary files named theme.php via the theme parameter to index.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0117.html; http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0117.html
CVE: CVE-2003-1538
Published: 2003-12-31
Description: susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not properly filter shell metacharacters, which allows remote attackers to execute arbitrary commands via CGI queries.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/7906; http://www.novell.com/linux/security/advisories/2003_005_susehelp.html; http://www.securitytracker.com/id?1005954
CVE: CVE-2003-1539
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before 0.21 allows remote attackers to inject arbitrary web script or HTML via (1) file names and (2) directory names.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/8257; http://sourceforge.net/project/shownotes.php?release_id=144274; http://sourceforge.net/tracker/index.php?func=detail&aid=695597&group_id=60333&atid=493842
CVE: CVE-2003-1540
Published: 2003-12-31
Description: WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain authentication information via a direct request to (1) !pwds.txt and (2) !nicks.txt.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/8396; http://securityreason.com/securityalert/3645; http://securitytracker.com/id?1006352
CVE: CVE-2003-1541
Published: 2003-12-31
Description: PlanetMoon Guestbook tr3.a stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin script password, and other passwords, via a direct request to files/passwd.txt.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/8392; http://securityreason.com/securityalert/3653; http://www.securityfocus.com/archive/1/315895/30/25400/threaded
CVE: CVE-2003-1542
Published: 2003-12-31
Description: Directory traversal vulnerability in plugins/file.php in phpWebFileManager before 0.4.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the fm_path parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://platon.sk/projects/release_view_page.php?release_id=2; http://secunia.com/advisories/8183; http://www.securityfocus.com/bid/6933
CVE: CVE-2003-1543
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/8477; http://securitytracker.com/id?1006428; http://www.geocities.com/gzhangx/websrv/docs/security.html
CVE: CVE-2003-1544
Published: 2003-12-31
Description: Unrestricted critical resource lock in Terminal Services for Windows 2000 before SP4 and Windows XP allows remote authenticated users to cause a denial of service (reboot) by obtaining a read lock on msgina.dll, which prevents msgina.dll from being loaded.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/7959; http://securityreason.com/securityalert/3654; http://support.microsoft.com/kb/815225/en-us
CVE: CVE-2003-1545
Published: 2003-12-31
Description: Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read arbitrary files via a full pathname in the file parameter.  NOTE: This was originally reported as an issue in PHP-Nuke 6.5, but this is an independent addon.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/archive/1/316179/30/25340/threaded; http://www.securityfocus.com/archive/1/316198/30/25340/threaded; http://www.securityfocus.com/archive/1/316209/30/25340/threaded
CVE: CVE-2003-1546
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in gbook.php in Filebased guestbook 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the comment section.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2003-03/0219.html; http://secunia.com/advisories/8317; http://www.securityfocus.com/bid/7104
CVE: CVE-2003-1547
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in block-Forums.php in the Splatt Forum module for PHP-Nuke 6.x allows remote attackers to inject arbitrary web script or HTML via the subject parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/8478; http://securityreason.com/securityalert/3718; http://www.securityfocus.com/archive/1/316925/30/25250/threaded
CVE: CVE-2003-1548
Published: 2003-12-31
Description: MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to obtain sensitive information via an invalid IDAdmin or other parameter, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/8320; http://securityreason.com/securityalert/3717; http://www.securityfocus.com/archive/1/315317/30/25460/threaded
CVE: CVE-2003-1549
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in header.php in MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the ma_kw parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/8320; http://securityreason.com/securityalert/3717; http://www.security-corporation.com/download/patch/MyABraCaDaWebv1.0.2XSSpatch.zip
CVE: CVE-2003-1550
Published: 2003-12-31
Description: XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsOption parameter, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5420&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8106&w=2; http://secunia.com/advisories/8353
CVE: CVE-2003-1551
Published: 2003-12-31
Description: Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown impact and attack vectors related to "malicious script."
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/8133; http://support.novell.com/servlet/tidfinder/2964956; http://www.securityfocus.com/bid/6896
CVE: CVE-2003-1552
Published: 2003-12-31
Description: Unrestricted file upload vulnerability in uploader.php in Uploader 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/archive/1/313787/30/25670/threaded; http://www.securityfocus.com/archive/1/313819/30/25640/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/11467
CVE: CVE-2003-1553
Published: 2003-12-31
Description: Haakon Nilsen Simple Internet Publishing System (SIPS) 0.2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password and other user information via a direct request to a user-specific configuration directory.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://securityreason.com/securityalert/3780; http://www.securityfocus.com/archive/1/315504/30/25460/threaded; http://www.securityfocus.com/bid/7134
CVE: CVE-2003-1554
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in scozbook/add.php in ScozNet ScozBook 1.1 BETA allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) useremail, (3) aim, (4) msn, (5) sitename and (6) siteaddy variables.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/8476; http://securityreason.com/securityalert/3781; http://www.securityfocus.com/archive/1/316747/30/25280/threaded
CVE: CVE-2003-1555
Published: 2003-12-31
Description: ScozNet ScozBook 1.1 BETA allows remote attackers to obtain sensitive information via an invalid PG parameter in view.php, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/8476; http://securityreason.com/securityalert/3781; http://www.securityfocus.com/archive/1/316747/30/25280/threaded
CVE: CVE-2003-1556
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in cc_guestbook.pl in CGI City CC GuestBook allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) homepage_title (webpage title) parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/3796; http://www.securityfocus.com/archive/1/316764/30/25250/threaded; http://www.securityfocus.com/bid/7237
CVE: CVE-2003-1557
Published: 2003-12-31
Description: Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B"), allows remote attackers to execute arbitrary code via email containing headers with leading "." characters.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8777&w=2; http://secunia.com/advisories/7983; http://www.securityfocus.com/archive/1/309912/30/26090/threaded
CVE: CVE-2003-1558
Published: 2003-12-31
Description: Buffer overflow in httpd.c of fnord 1.6 allows remote attackers to create a denial of service (crash) and possibly execute arbitrary code via a long CGI request passed to the do_cgi function.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/7893; http://www.fefe.de/fnord/; http://www.securityfocus.com/archive/1/307400/30/26270/threaded
CVE: CVE-2003-1559
Published: 2003-12-31
Description: Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://securityreason.com/securityalert/3989; http://www.gadgetopia.com/2003/12/23/OutlookWebAccessPrivacyHole.html; http://www.securityfocus.com/archive/1/348360
CVE: CVE-2003-1560
Published: 2003-12-31
Description: Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://securityreason.com/securityalert/4004; http://www.securityfocus.com/archive/1/348574; http://securityreason.com/securityalert/4004
CVE: CVE-2003-1561
Published: 2003-12-31
Description: Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://securityreason.com/securityalert/4004; http://www.securityfocus.com/archive/1/348574; http://securityreason.com/securityalert/4004
CVE: CVE-2003-1562
Published: 2003-12-31
Description: sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190.
CVSS Score: 7.6 (HIGH)
CWE: CWE-362
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=248747; http://www.securityfocus.com/archive/1/320153; http://www.securityfocus.com/archive/1/320302
CVE: CVE-2003-1563
Published: 2003-12-31
Description: Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters (OPS/RAC) allows local users to cause a denial of service (cluster node panic or abort) by launching a daemon listening on a TCP port that would otherwise be used by the Distributed Lock Manager (DLM), possibly involving this daemon responding in a manner that spoofs a cluster reconfiguration.
CVSS Score: 4.0 (MEDIUM)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-101393-1; http://sunsolve.sun.com/search/document.do?assetkey=1-26-200810-1; http://www.auscert.org.au/render.html?it=3672
CVE: CVE-2003-1564
Published: 2003-12-31
Description: libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, aka the "billion laughs attack."
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-776
References: http://mail.gnome.org/archives/xml/2008-August/msg00034.html; http://secunia.com/advisories/31868; http://www.reddit.com/r/programming/comments/65843/time_to_upgrade_libxml2
CVE: CVE-2004-1784
Published: 2004-01-03
Description: Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/10527; http://www.elitehaven.net/webcamwatchdog.txt; http://www.osvdb.org/3312
CVE: CVE-2004-1785
Published: 2004-01-03
Description: SQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the $this->chosen_month variable.
CVSS Score: 7.5 (HIGH)
References: http://forums.invisionpower.com/index.php?act=ST&f=1&t=108786; http://secunia.com/advisories/10530; http://www.osvdb.org/3319
CVE: CVE-2004-1786
Published: 2004-01-04
Description: PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensitive information via a direct request to 8275.mdb.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1008627; http://www.securityfocus.com/bid/9354; https://exchange.xforce.ibmcloud.com/vulnerabilities/14169
CVE: CVE-2003-0963
Published: 2004-01-05
Description: Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040101-01-U; ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6196&w=2
CVE: CVE-2003-0977
Published: 2004-01-05
Description: CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc; ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc; http://ccvs.cvshome.org/servlets/NewsItemView?newsID=84&JServSessionIdservlets=8u3x1myav1
CVE: CVE-2003-0978
Published: 2004-01-05
Description: Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious keyserver to cause a denial of service (crash) and possibly execute arbitrary code during key retrieval.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5214&w=2; http://www.novell.com/linux/security/advisories/2003_048_gpg.html; http://www.s-quadra.com/advisories/Adv-20031203.txt
CVE: CVE-2003-0979
Published: 2004-01-05
Description: FreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which allows remote attackers to (1) use VisitorBook as an open mail relay, when $mailuser is 1, via extra headers in the email field, or (2) cause the guestbook database to be deleted via a large number of line breaks that exceeds the $max_posts variable.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2493&w=2; http://www.westpoint.ltd.uk/advisories/wp-03-0001.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2493&w=2
CVE: CVE-2003-0980
Published: 2004-01-05
Description: Cross-site scripting (XSS) vulnerability in FreeScripts VisitorBook LE (visitorbook.pl) allows remote attackers to inject arbitrary HTML or web script via (1) the "do" parameter, (2) via the "user" parameter from a host with a malicious reverse DNS name, (3) via quote marks or ampersands in other parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2493&w=2; http://www.westpoint.ltd.uk/advisories/wp-03-0001.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2493&w=2
CVE: CVE-2003-0981
Published: 2004-01-05
Description: FreeScripts VisitorBook LE (visitorbook.pl) logs the reverse DNS name of a visiting host, which allows remote attackers to spoof the origin of their incoming requests and facilitate cross-site scripting (XSS) attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-346
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2493&w=2; http://www.westpoint.ltd.uk/advisories/wp-03-0001.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2493&w=2
CVE: CVE-2003-0982
Published: 2004-01-05
Description: Buffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11, and 5.x before 5.0.5, allows remote attackers to execute arbitrary code via a long password.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/10409; http://www.cisco.com/warp/public/707/cisco-sa-20031210-ACNS-auth.shtml; http://www.kb.cert.org/vuls/id/352462
CVE: CVE-2003-0983
Published: 2004-01-05
Description: Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, which allows local or remote attackers to conduct unauthorized activities via (1) a "bubba" local user account, (2) an open TCP port 34571, or (3) when a local DHCP server is unavailable, a DHCP server on the manufacturer's test network.
CVSS Score: 7.5 (HIGH)
References: http://www.cisco.com/warp/public/707/cisco-sa-20031210-unity.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20031210-unity.shtml
CVE: CVE-2003-0984
Published: 2004-01-05
Description: Real time clock (RTC) routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space.
CVSS Score: 4.6 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000799; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5081&w=2; http://secunia.com/advisories/10533
CVE: CVE-2003-0995
Published: 2004-01-05
Description: Buffer overflow in the Microsoft Message Queue Manager (MSQM) allows remote attackers to cause a denial of service (RPC service crash) via a queue registration request.
CVSS Score: 7.5 (HIGH)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-039; https://exchange.xforce.ibmcloud.com/vulnerabilities/13131; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-039
CVE: CVE-2003-0996
Published: 2004-01-05
Description: Unknown "System Security Vulnerability" in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 allows attackers to gain privileges via the help interface.
CVSS Score: 4.6 (MEDIUM)
References: http://support.ca.com/techbases/rp/urc6x-secnote.html; http://www.secunia.com/advisories/10420/; http://support.ca.com/techbases/rp/urc6x-secnote.html
CVE: CVE-2003-0997
Published: 2004-01-05
Description: Unknown "Denial of Service Attack" vulnerability in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 allows attackers to cause a denial of service (CPU consumption in URC host service).
CVSS Score: 5.0 (MEDIUM)
References: http://support.ca.com/techbases/rp/urc6x-secnote.html; http://www.secunia.com/advisories/10420/; http://support.ca.com/techbases/rp/urc6x-secnote.html
CVE: CVE-2003-0998
Published: 2004-01-05
Description: Unknown "potential system security vulnerability" in Computer Associates (CA) Unicenter Remote Control 5.0 through 5.2, and ControlIT 5.0 and 5.1, may allow attackers to gain privileges to the local system account.
CVSS Score: 4.6 (MEDIUM)
References: http://support.ca.com/techbases/rp/urc5x-secnote.html; http://www.secunia.com/advisories/10420/; http://support.ca.com/techbases/rp/urc5x-secnote.html
CVE: CVE-2003-0999
Published: 2004-01-05
Description: Unknown multiple vulnerabilities in (1) lpstat and (2) the libprint library in Solaris 2.6 through 9 may allow attackers to execute arbitrary code or read or write arbitrary files.
CVSS Score: 7.2 (HIGH)
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57451; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4098; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57451
CVE: CVE-2003-1000
Published: 2004-01-05
Description: xchat 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an invalid ID number, which causes a null dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://mail.nl.linux.org/xchat-announce/2003-12/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9276&w=2; http://mail.nl.linux.org/xchat-announce/2003-12/msg00000.html
CVE: CVE-2003-1001
Published: 2004-01-05
Description: Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth requests for (1) TACACS+ or (2) RADIUS authentication.
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml
CVE: CVE-2003-1002
Published: 2004-01-05
Description: Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is set.
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml