deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-1210
Published: 2003-12-31
Description: Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to the getit function or the (2) min parameter to the search function.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2003-05/0147.html; http://www.securityfocus.com/bid/7588; https://exchange.xforce.ibmcloud.com/vulnerabilities/11984
CVE: CVE-2003-1211
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in search.asp for MaxWebPortal 1.30 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the Search parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-06/0048.html; http://secunia.com/advisories/8979; http://www.osvdb.org/3281
CVE: CVE-2003-1212
Published: 2003-12-31
Description: MaxWebPortal 1.30 allows remote attackers to perform unauthorized actions by modifying hidden form fields, such as the (1) news, (2) lock, or (3) allmem fields in the 'start new topic' HTML page.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2003-06/0048.html; http://secunia.com/advisories/8979; http://www.osvdb.org/4933
CVE: CVE-2003-1213
Published: 2003-12-31
Description: The default installation of MaxWebPortal 1.30 stores the portal database under the web document root with insecure access control, which allows remote attackers to obtain sensitive information via a direct request to database/db2000.mdb.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2003-06/0048.html; http://secunia.com/advisories/8979; http://www.securityfocus.com/bid/7837
CVE: CVE-2003-1219
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for osCommerce before 2.2-MS3 allows remote attackers to inject arbitrary web script or HTML via the osCsid parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://osdir.com/ml/web.oscommerce.cvs/2003-12/msg00024.html; http://www.oscommerce.com/community/bugs%2C1546; http://www.securityfocus.com/archive/1/347831
CVE: CVE-2003-1220
Published: 2003-12-31
Description: BEA WebLogic Server proxy plugin for BEA Weblogic Express and Server 6.1 through 8.1 SP 1 allows remote attackers to cause a denial of service (proxy plugin crash) via a malformed URL.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/25; http://www.securityfocus.com/bid/9034; http://dev2dev.bea.com/pub/advisory/25
CVE: CVE-2003-1221
Published: 2003-12-31
Description: BEA WebLogic Express and Server 7.0 through 8.1 SP 1, under certain circumstances when a request to use T3 over SSL (t3s) is made to the insecure T3 port, may use a non-SSL connection for the communication, which could allow attackers to sniff sessions.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/32; http://www.securityfocus.com/bid/9034; http://dev2dev.bea.com/pub/advisory/32
CVE: CVE-2003-1222
Published: 2003-12-31
Description: BEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service (JMS) provider, echoes the password for the foreign provider to the console and stores it in cleartext in config.xml, which could allow attackers to obtain the password.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/63; http://www.securityfocus.com/bid/9034; http://dev2dev.bea.com/pub/advisory/63
CVE: CVE-2003-1223
Published: 2003-12-31
Description: The Node Manager for BEA WebLogic Express and Server 6.1 through 8.1 SP 1 allows remote attackers to cause a denial of service (Node Manager crash) via malformed data to the Node Manager's port, as demonstrated by nmap.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/48; http://www.securityfocus.com/bid/9034; http://dev2dev.bea.com/pub/advisory/48
CVE: CVE-2003-1224
Published: 2003-12-31
Description: Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password to the screen in cleartext, which allows attackers to read a user's password by physically observing ("shoulder surfing") the screen.
CVSS Score: 2.1 (LOW)
References: http://dev2dev.bea.com/pub/advisory/22; http://www.securityfocus.com/bid/7563; http://dev2dev.bea.com/pub/advisory/22
CVE: CVE-2003-1225
Published: 2003-12-31
Description: The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords.
CVSS Score: 2.1 (LOW)
References: http://dev2dev.bea.com/pub/advisory/22; http://www.securityfocus.com/bid/7563; http://dev2dev.bea.com/pub/advisory/22
CVE: CVE-2003-1226
Published: 2003-12-31
Description: BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password encryption insecurely in config.xml, filerealm.properties, and weblogic-rar.xml, which allows local users to learn those secrets and decrypt passwords.
CVSS Score: 2.1 (LOW)
References: http://dev2dev.bea.com/pub/advisory/22; http://www.securityfocus.com/bid/7563; http://www.securityfocus.com/bid/7587
CVE: CVE-2003-1227
Published: 2003-12-31
Description: PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, allows remote attackers to inject arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412.  NOTE: this issue might be exploitable only during installation, or if the administrator has not run a security script after installation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/341044; http://www.securityfocus.com/archive/1/341094; http://www.securityfocus.com/archive/1/341098
CVE: CVE-2003-1228
Published: 2003-12-31
Description: Buffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via an HTTP request with a long path.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7504&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5839&w=2; http://secunia.com/advisories/10385/
CVE: CVE-2003-1229
Published: 2003-12-31
Description: X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and (4) Java Web Start 1.0 through 1.2 incorrectly calls the isClientTrusted method when determining server trust, which results in improper validation of digital certificate and allows remote attackers to (1) falsely authenticate peers for SSL or (2) incorrectly validate signed JAR files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0334.html; http://java.sun.com/products/jsse/CHANGES.txt; http://secunia.com/advisories/7943
CVE: CVE-2003-1230
Published: 2003-12-31
Description: The implementation of SYN cookies (syncookies) in FreeBSD 4.5 through 5.0-RELEASE-p3 uses only 32-bit internal keys when generating syncookies, which makes it easier for remote attackers to conduct brute force ISN guessing attacks and spoof legitimate traffic.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/8142/; http://www.osvdb.org/19785; http://www.securityfocus.com/advisories/5013
CVE: CVE-2003-1231
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 5.5 allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/10458; http://securitytracker.com/id?1008522; http://www.securiteam.com/unixfocus/6D00F2A95C.html
CVE: CVE-2003-1232
Published: 2003-12-31
Description: Emacs 21.2.1 does not prompt or warn the user before executing Lisp code in the local variables section of a text file, which allows user-assisted attackers to execute arbitrary commands, as demonstrated using the mode-name variable.
CVSS Score: 5.1 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286183; http://groups.google.com/group/gnu.emacs.bug/browse_frm/thread/9424ec1b2fdae321/c691a2da8904db0f?hl=en&lr=&ie=UTF-8&oe=UTF-8&rnum=1&prev=/groups%3Fq%3Dguninski%2Bemacs%26hl%3Den%26lr%3D%26ie%3DUTF-8%26oe%3DUTF-8%26selm%3Dmailman[PII_REDACTED]806.19936.bug-gnu-emacs%2540gnu.org%26rnum%3D1#c691a2da8904db0f; http://lists.grok.org.uk/pipermail/full-disclosure/2003-May/005089.html
CVE: CVE-2003-1233
Published: 2003-12-31
Description: Pedestal Software Integrity Protection Driver (IPD) 1.3 and earlier allows privileged attackers, such as rootkits, to bypass file access restrictions to the Windows kernel by using the NtCreateSymbolicLinkObject function to create a symbolic link to (1) \Device\PhysicalMemory or (2) to a drive letter using the subst command.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-59
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0017.html; http://archives.neohapsis.com/archives/bugtraq/2003-01/0018.html; http://secunia.com/advisories/7816
CVE: CVE-2003-1234
Published: 2003-12-31
Description: Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via multiple calls to (1) fpathconf and (2) lseek, which do not properly decrement f_count through a call to fdrop.
CVSS Score: 3.6 (LOW)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:44.filedesc.asc; http://archives.neohapsis.com/archives/bugtraq/2003-01/0057.html; http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0006.html
CVE: CVE-2003-1235
Published: 2003-12-31
Description: BRW WebWeaver 1.03 allows remote attackers to obtain sensitive server environment information via a URL request for testcgi.exe, which lists the values of environment variables and the current working directory.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-04/0014.html; http://www.iss.net/security_center/static/11686.php; http://www.securityfocus.com/bid/7283
CVE: CVE-2003-1236
Published: 2003-12-31
Description: Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to execute arbitrary code via format string specifiers in syslog.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0011.html; http://secunia.com/advisories/7831; http://tanne.fluxnetz.de/download/tanne-0.7.1.tar.bz2
CVE: CVE-2003-1237
Published: 2003-12-31
Description: Cross-site scripting vulnerability (XSS) in WWWBoard 2.0A2.1 and earlier allows remote attackers to inject arbitrary HTML or web script via a message post.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0274.html; http://www.iss.net/security_center/static/11383.php; http://www.securityfocus.com/bid/6918
CVE: CVE-2003-1238
Published: 2003-12-31
Description: Cross-site scripting vulnerability (XSS) in Nuked-Klan 1.3 beta and earlier allows remote attackers to steal authentication information via cookies by injecting arbitrary HTML or script into op of the (1) Team, (2) News, and (3) Liens modules.
CVSS Score: 5.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html; http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html; http://www.iss.net/security_center/static/11420.php
CVE: CVE-2003-1239
Published: 2003-12-31
Description: Directory traversal vulnerability in sendphoto.php in WihPhoto 0.86 allows remote attackers to read arbitrary files via .. specifiers in the album parameter, and the target filename in the pic parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0092.html; http://www.iss.net/security_center/static/11429.php; http://www.securityfocus.com/archive/1/312966
CVE: CVE-2003-1240
Published: 2003-12-31
Description: PHP remote file inclusion vulnerability in CuteNews 0.88 allows remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter in (1) shownews.php, (2) search.php, or (3) comments.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0320.html; http://www.iss.net/security_center/static/11417.php; http://www.securityfocus.com/bid/6935
CVE: CVE-2003-1241
Published: 2003-12-31
Description: Cross-site scripting vulnerability (XSS) in (1) admin_index.php, (2) admin_pass.php, (3) admin_modif.php, and (4) admin_suppr.php in MyGuestbook 3.0 allows remote attackers to execute arbitrary PHP code by modifying the location parameter to reference a URL on a remote web server that contains file.php via script injected into the pseudo, email, and message parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0089.html; http://www.securityfocus.com/archive/1/312762; http://www.securityfocus.com/bid/6906
CVE: CVE-2003-1242
Published: 2003-12-31
Description: Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent module, which returns the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0236.html; http://www.iss.net/security_center/static/11372.php; http://www.securityfocus.com/bid/6893
CVE: CVE-2003-1243
Published: 2003-12-31
Description: Cross-site scripting vulnerability (XSS) in Sage 1.0 b3 allows remote attackers to insert arbitrary HTML or web script via the mod parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0236.html; http://www.securityfocus.com/bid/6894; https://exchange.xforce.ibmcloud.com/vulnerabilities/11371
CVE: CVE-2003-1244
Published: 2003-12-31
Description: SQL injection vulnerability in page_header.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote attackers to brute force user passwords and possibly gain unauthorized access to forums via the forum_id parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0245.html; http://www.iss.net/security_center/static/11376.php; http://www.securityfocus.com/bid/6888
CVE: CVE-2003-1245
Published: 2003-12-31
Description: index2.php in Mambo 4.0.12 allows remote attackers to gain administrator access via a URL request where session_id is set to the MD5 hash of a session cookie.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0302.html; http://www.securityfocus.com/bid/6926; https://exchange.xforce.ibmcloud.com/vulnerabilities/11398
CVE: CVE-2003-1246
Published: 2003-12-31
Description: NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver (IPD) 1.2 and 1.3 allows local users to create and overwrite arbitrary files via a symlink attack on \winnt\system32\drivers using the subst command.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0017.html; http://archives.neohapsis.com/archives/bugtraq/2003-01/0018.html; http://www.iss.net/security_center/static/10979.php
CVE: CVE-2003-1247
Published: 2003-12-31
Description: Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL content type in CGI::readFile, (2) a long path in diskusage, and (3) a long fname in flist.
CVSS Score: 7.5 (HIGH)
References: http://psoft.net/misc/webshell_patch.html; http://secunia.com/advisories/7832; http://www.iss.net/security_center/static/10999.php
CVE: CVE-2003-1248
Published: 2003-12-31
Description: H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) mode and (2) zipfile parameters in a URL request.
CVSS Score: 7.5 (HIGH)
References: http://psoft.net/misc/webshell_patch.html; http://www.iss.net/security_center/static/11001.php; http://www.securityfocus.com/archive/1/305313
CVE: CVE-2003-1249
Published: 2003-12-31
Description: WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0014.html; http://secunia.com/advisories/7846; http://www.iss.net/security_center/static/11026.php
CVE: CVE-2003-1250
Published: 2003-12-31
Description: Efficient Networks 5861 DSL router, when running firmware 5.3.80 configured to block incoming TCP SYN, packets allows remote attackers to cause a denial of service (crash) via a flood of TCP SYN packets to the WAN interface using a port scanner such as nmap.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0015.html; http://securitytracker.com/id?1005980; http://www.iss.net/security_center/static/11032.php
CVE: CVE-2003-1251
Published: 2003-12-31
Description: The (1) menu.inc.php, (2) datasets.php and (3) mass_operations.inc.php (mistakenly referred to as mass_opeations.inc.php) scripts in N/X 2002 allow remote attackers to execute arbitrary PHP code via a c_path that references a URL on a remote web server that contains the code.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0005.html; http://secunia.com/advisories/7808; http://www.iss.net/security_center/static/10969.php
CVE: CVE-2003-1252
Published: 2003-12-31
Description: register.php in S8Forum 3.0 allows remote attackers to execute arbitrary PHP commands by creating a user whose name ends in a .php extension and entering the desired commands into the E-mail field, which creates a web-accessible .php file that can be called by the attacker, as demonstrated using a "system($cmd)" E-mail address with a "any_name.php" username.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0004.html; http://secunia.com/advisories/7819; http://www.iss.net/security_center/static/10974.php
CVE: CVE-2003-1253
Published: 2003-12-31
Description: PHP remote file inclusion vulnerability in Bookmark4U 1.8.3 allows remote attackers to execute arbitrary PHP code viaa URL in the prefix parameter to (1) dbase.php, (2) config.php, or (3) common.load.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0049.html; http://www.iss.net/security_center/static/11009.php; http://archives.neohapsis.com/archives/bugtraq/2003-01/0049.html
CVE: CVE-2003-1254
Published: 2003-12-31
Description: Active PHP Bookmarks (APB) 1.1.01 allows remote attackers to execute arbitrary PHP code via (1) head.php, (2) apb_common.php, or (3) apb_view_class.php by modifying the APB_SETTINGS parameter to reference a URL on a remote web server that contains the code.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0049.html; http://www.iss.net/security_center/static/11010.php; http://www.securityfocus.com/bid/6545
CVE: CVE-2003-1255
Published: 2003-12-31
Description: add_bookmark.php in Active PHP Bookmarks (APB) 1.1.01 allows remote attackers to add arbitrary bookmarks as other users using a modified auth_user_id parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0049.html; http://www.securityfocus.com/bid/6546; https://exchange.xforce.ibmcloud.com/vulnerabilities/11011
CVE: CVE-2003-1256
Published: 2003-12-31
Description: aff_liste_langue.php in E-theni allows remote attackers to execute arbitrary PHP code by modifying the rep_include parameter to reference a URL on a remote web server that contains para_langue.php.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0009.html; http://www.iss.net/security_center/static/11013.php; http://www.securityfocus.com/archive/1/305381
CVE: CVE-2003-1257
Published: 2003-12-31
Description: find_theni_home.php in E-theni allows remote attackers to obtain sensitive system information via a URL request which executes phpinfo.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0009.html; http://www.iss.net/security_center/static/11012.php; http://www.securityfocus.com/archive/1/305381
CVE: CVE-2003-1258
Published: 2003-12-31
Description: activate.php in versatileBulletinBoard (vBB) 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0017.html; http://www.iss.net/security_center/static/11044.php; http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0017.html
CVE: CVE-2003-1259
Published: 2003-12-31
Description: Buffer overflow in CuteFTP 4.2 and 5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP server banner.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0026.html; http://www.iss.net/security_center/static/10984.php; http://www.securityfocus.com/archive/1/325659
CVE: CVE-2003-1260
Published: 2003-12-31
Description: Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command.
CVSS Score: 7.6 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0123.html; http://archives.neohapsis.com/archives/bugtraq/2003-02/0087.html; http://seclists.org/lists/fulldisclosure/2003/Jan/0126.html
CVE: CVE-2003-1261
Published: 2003-12-31
Description: Buffer overflow in CuteFTP 5.0 and 5.0.1 allows local users to cause a denial of service (crash) by copying a long URL into a clipboard.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0087.html; http://www.iss.net/security_center/static/11275.php; http://www.securityfocus.com/archive/1/310710
CVE: CVE-2003-1262
Published: 2003-12-31
Description: Buffer overflow in the http_fetch function of HTTP Fetcher 1.0.0 and 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL request via a long (1) host, (2) referer, or (3) userAgent value.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9429&w=2; http://secunia.com/advisories/7823; http://www.iss.net/security_center/static/11000.php
CVE: CVE-2003-1263
Published: 2003-12-31
Description: ICAL.EXE in iCal 3.7 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, possibly due to an invalid method name.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0011.html; http://www.iss.net/security_center/static/10973.php; http://www.securityfocus.com/bid/6505
CVE: CVE-2003-1264
Published: 2003-12-31
Description: TFTP server in Longshine Wireless Access Point (WAP) LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file (config.img) and other files without authentication.
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/10997.php; http://www.securityfocus.com/archive/1/305344; http://www.securityfocus.com/archive/1/305391
CVE: CVE-2003-1265
Published: 2003-12-31
Description: Netscape 7.0 and Mozilla 5.0 do not immediately delete messages in the trash folder when users select the 'Empty Trash' option, which could allow local users to access deleted messages.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0277.html; http://www.iss.net/security_center/static/10963.php; http://www.securityfocus.com/bid/6499