deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-0228
Published: 2003-05-27
Description: Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed in an arbitrary location.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6488&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9389&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]8901&w=2
CVE: CVE-2003-0235
Published: 2003-05-27
Description: Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1995&w=2; http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
CVE: CVE-2003-0236
Published: 2003-05-27
Description: Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subject or (2) Date headers.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1995&w=2; http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
CVE: CVE-2003-0237
Published: 2003-05-27
Description: The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1995&w=2; http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
CVE: CVE-2003-0238
Published: 2003-05-27
Description: The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CPU consumption) by spoofing the address of an ADS server and sending HTML with a -1 width in a table tag.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1995&w=2; http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
CVE: CVE-2003-0239
Published: 2003-05-27
Description: icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF89a headers that do not contain a GCT (Global Color Table) or an LCT (Local Color Table) after an Image Descriptor.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1995&w=2; http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
CVE: CVE-2003-0243
Published: 2003-05-27
Description: Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter for the (1) normal_html.cgi or (2) member_html.cgi scripts.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0058.html; http://securitytracker.com/id?1006707; http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0058.html
CVE: CVE-2003-0244
Published: 2003-05-27
Description: The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service (CPU consumption) via packets with forged source addresses that cause a large number of hash table collisions.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0073.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6555&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3063&w=2
CVE: CVE-2003-0255
Published: 2003-05-27
Description: The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, which prevents GnuPG from warning the encrypting user when a user ID does not have a trusted path.
CVSS Score: 10.0 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000694; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1174&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5157&w=2
CVE: CVE-2003-0256
Published: 2003-05-27
Description: The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows remote attackers to execute arbitrary commands.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000665; http://kopete.kde.org/index.php?page=newsstory&news=Kopete_releases_version_0.6.2; http://www.mandriva.com/security/advisories?name=MDKSA-2003:055
CVE: CVE-2003-0258
Published: 2003-05-27
Description: Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.
CVSS Score: 7.5 (HIGH)
References: http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml; http://www.kb.cert.org/vuls/id/727780; https://exchange.xforce.ibmcloud.com/vulnerabilities/11954
CVE: CVE-2003-0259
Published: 2003-05-27
Description: Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7 allows remote attackers to cause a denial of service (reload) via a malformed SSH initialization packet.
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml; http://www.kb.cert.org/vuls/id/317348; https://exchange.xforce.ibmcloud.com/vulnerabilities/11955
CVE: CVE-2003-0260
Published: 2003-05-27
Description: Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service (slowdown and possibly reload) via a flood of malformed ICMP packets.
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml; http://www.kb.cert.org/vuls/id/221164; https://exchange.xforce.ibmcloud.com/vulnerabilities/11956
CVE: CVE-2003-0261
Published: 2003-05-27
Description: fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://www.debian.org/security/2003/dsa-302; http://www.debian.org/security/2003/dsa-302
CVE: CVE-2003-0262
Published: 2003-05-27
Description: leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges, which KATAXWR is not designed to have.
CVSS Score: 7.2 (HIGH)
References: http://www.debian.org/security/2003/dsa-299; http://www.securityfocus.com/bid/7505; https://exchange.xforce.ibmcloud.com/vulnerabilities/11945
CVE: CVE-2003-0263
Published: 2003-05-27
Description: Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) 1.22 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0052.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2836&w=2; http://www.securityfocus.com/bid/7506
CVE: CVE-2003-0264
Published: 2003-05-27
Description: Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1335&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]1895&w=2; http://packetstormsecurity.com/files/161526/SLMail-5.1.0.4420-Remote-Code-Execution.html
CVE: CVE-2003-0265
Published: 2003-05-27
Description: Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed.
CVSS Score: 6.2 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0097&w=2; http://www.securityfocus.com/bid/7421; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0097&w=2
CVE: CVE-2003-0266
Published: 2003-05-27
Description: Multiple buffer overflows in SLWebMail 3 on Windows systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long Language parameter to showlogin.dll, (2) a long CompanyID parameter to recman.dll, (3) a long CompanyID parameter to admin.dll, or (4) a long CompanyID parameter to globallogin.dll.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0273&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]1919&w=2; http://www.nextgenss.com/advisories/slwebmail-vulns.txt
CVE: CVE-2003-0267
Published: 2003-05-27
Description: ShowGodLog.dll in SLWebMail 3 on Windows systems allows remote attackers to read arbitrary files by directly calling ShowGodLog.dll with an argument specifying the full path of the target file.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0273&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]1919&w=2; http://www.nextgenss.com/advisories/slwebmail-vulns.txt
CVE: CVE-2003-0268
Published: 2003-05-27
Description: SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0273&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]1919&w=2; http://www.nextgenss.com/advisories/slwebmail-vulns.txt
CVE: CVE-2003-0269
Published: 2003-05-27
Description: Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0053.html; http://lists.grok.org.uk/pipermail/full-disclosure/2003-May/004892.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8794&w=2
CVE: CVE-2003-0271
Published: 2003-05-27
Description: Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8622&w=2; http://security.nnov.ru/search/document.asp?docid=4309; http://www.securityfocus.com/archive/1/316958
CVE: CVE-2003-0272
Published: 2003-05-27
Description: admin.php in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cookie to an "adminok" value.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4660&w=2; http://www.frog-man.org/tutos/miniPortail.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4660&w=2
CVE: CVE-2003-0273
Published: 2003-05-27
Description: Cross-site scripting (XSS) vulnerability in the web interface for Request Tracker (RT) 1.0 through 1.0.7 allows remote attackers to execute script via message bodies.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.fsck.com/pipermail/rt-announce/2003-May/000071.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5275&w=2; http://lists.fsck.com/pipermail/rt-announce/2003-May/000071.html
CVE: CVE-2003-0274
Published: 2003-05-27
Description: Buffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute arbitrary code via a long ULISTPROC_UMASK value.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8693&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8693&w=2
CVE: CVE-2003-1069
Published: 2003-06-03
Description: The Telnet daemon (in.telnetd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (CPU consumption by infinite loop).
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/8935/; http://sunsolve.sun.com/search/document.do?assetkey=1-26-54181-1; http://www.securityfocus.com/bid/7794
CVE: CVE-2003-1206
Published: 2003-06-03
Description: Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crash) via "%s" or "%n" sequences in (1) the username during login, or other FTP commands such as (2) dir.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1151&w=2; http://secunia.com/advisories/8929; http://www.crob.net/studio/ftpserver/
CVE: CVE-2003-1068
Published: 2003-06-06
Description: Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4659277, a different vulnerability than CVE-2003-1082.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/8957/; http://sunsolve.sun.com/search/document.do?assetkey=1-26-55260-1; http://www.ciac.org/ciac/bulletins/n-105.shtml
CVE: CVE-2002-1454
Published: 2003-06-09
Description: MyWebServer 1.0.2 allows remote attackers to determine the absolute path of the web document root via a request for a directory that does not exist, which leaks the pathname in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0077.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9934&w=2; http://www.iss.net/security_center/static/9862.php
CVE: CVE-2002-1455
Published: 2003-06-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd allow remote attackers to insert script or HTML into web pages via (1) test.php, (2) test.shtml, or (3) redir.exe.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0263.html; http://archives.neohapsis.com/archives/bugtraq/2002-08/0264.html; http://archives.neohapsis.com/archives/bugtraq/2002-08/0266.html
CVE: CVE-2002-1456
Published: 2003-06-09
Description: Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0092.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2380&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]1893&w=2
CVE: CVE-2002-1457
Published: 2003-06-09
Description: SQL injection vulnerability in search.php for L-Forum 2.40 allows remote attackers to execute arbitrary SQL statements via the search parameter.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0074.html; http://www.iss.net/security_center/static/9837.php; http://www.securityfocus.com/bid/5468
CVE: CVE-2002-1458
Published: 2003-06-09
Description: Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, (3) Subject and (4) Body.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0115.html; http://sourceforge.net/tracker/download.php?group_id=53716&atid=471343&file_id=26687&aid=579278; http://www.iss.net/security_center/static/9838.php
CVE: CVE-2002-1459
Published: 2003-06-09
Description: Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, and (3) Subject.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0115.html; http://sourceforge.net/tracker/download.php?group_id=53716&atid=471343&file_id=26687&aid=579278; http://sourceforge.net/tracker/index.php?func=detail&aid=579278&group_id=53716&atid=471343
CVE: CVE-2002-1460
Published: 2003-06-09
Description: L-Forum 2.40 and earlier does not properly verify whether a file was uploaded or if the associated variables were set by POST (attachment, attachment_name, attachment_size and attachment_type), which allows remote attackers to read arbitrary files.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0115.html; http://sourceforge.net/tracker/download.php?group_id=53716&atid=471343&file_id=26687&aid=579278; http://sourceforge.net/tracker/index.php?func=detail&aid=579278&group_id=53716&atid=471343
CVE: CVE-2002-1461
Published: 2003-06-09
Description: Web Shop Manager 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search box.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0130.html; http://www.iss.net/security_center/static/9817.php; http://www.securiteam.com/securitynews/5KP0G0080E.html
CVE: CVE-2002-1462
Published: 2003-06-09
Description: details2.php in OrganicPHP PHP-affiliate 1.0, and possibly later versions, allows remote attackers to modify information of other users by modifying certain hidden form fields.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0141.html; http://www.iss.net/security_center/static/9858.php; http://www.securityfocus.com/bid/5482
CVE: CVE-2002-1463
Published: 2003-06-09
Description: Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers (ISN), which allows remote attackers to spoof connections.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0492.html; http://www.osvdb.org/855; http://www.securityfocus.com/bid/5387
CVE: CVE-2002-1564
Published: 2003-06-09
Description: Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains script which is executed when a page is loaded, aka the "Script within Cookies Reading Cookies" vulnerability.
CVSS Score: 5.0 (MEDIUM)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023
CVE: CVE-2003-0188
Published: 2003-06-09
Description: lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.
CVSS Score: 7.2 (HIGH)
References: http://www.debian.org/security/2003/dsa-304; http://www.redhat.com/support/errata/RHSA-2003-167.html; http://www.redhat.com/support/errata/RHSA-2003-169.html
CVE: CVE-2003-0189
Published: 2003-06-09
Description: The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which allows remote attackers to cause a denial of service (failed Basic authentication with valid usernames and passwords) when a threaded MPM is used.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000661; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2559&w=2; http://secunia.com/advisories/8881
CVE: CVE-2003-0194
Published: 2003-06-09
Description: tcpdump does not properly drop privileges to the pcap user when starting up.
CVSS Score: 4.6 (MEDIUM)
References: http://www.redhat.com/support/errata/RHSA-2003-151.html; http://www.redhat.com/support/errata/RHSA-2003-174.html; http://www.redhat.com/support/errata/RHSA-2003-151.html
CVE: CVE-2003-0223
Published: 2003-06-09
Description: Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in Microsoft Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to embed a URL containing script in a redirection message.
CVSS Score: 6.8 (MEDIUM)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-018; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A66; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-018
CVE: CVE-2003-0224
Published: 2003-06-09
Description: Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include (SSI) directive with a long filename, aka "Server Side Include Web Pages Buffer Overrun."
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]0944&w=2; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-018; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A483
CVE: CVE-2003-0225
Published: 2003-06-09
Description: The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service (memory consumption) with an ASP page.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]2772&w=2; http://www.aqtronix.com/Advisories/AQ-2003-01.txt; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-018
CVE: CVE-2003-0226
Published: 2003-06-09
Description: Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or (2) SEARCH method, which generates an error condition that is not properly handled.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-05/0308.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4860&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]2552&w=2
CVE: CVE-2003-0227
Published: 2003-06-09
Description: The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute arbitrary code via a certain network request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6177&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]1558&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]2011&w=2
CVE: CVE-2003-0240
Published: 2003-06-09
Description: The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1579&w=2; http://secunia.com/advisories/8876; http://securitytracker.com/id?1006854
CVE: CVE-2003-0241
Published: 2003-06-09
Description: FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it untrusted, which allows remote attackers to execute arbitrary code via a message that is rendered in IE using a less secure zone.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0091.html; http://www.secnap.net/security/gm001.html; http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0091.html
CVE: CVE-2003-0242
Published: 2003-06-09
Description: IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which could allow traffic that is not explicitly allowed by the policies.
CVSS Score: 7.5 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=61798; http://secunia.com/advisories/8798; http://securitytracker.com/id?1006796