deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-0245
Published: 2003-06-09
Description: Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long strings, as demonstrated using XML objects to mod_dav, and possibly other vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0095.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000661; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2559&w=2
CVE: CVE-2003-0303
Published: 2003-06-09
Description: SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0070.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1231&w=2; http://www.securityfocus.com/bid/7609
CVE: CVE-2003-0304
Published: 2003-06-09
Description: one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0070.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1231&w=2; http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0070.html
CVE: CVE-2003-0305
Published: 2003-06-09
Description: The Service Assurance Agent (SAA) in Cisco IOS 12.0 through 12.2, aka Response Time Reporter (RTR), allows remote attackers to cause a denial of service (crash) via malformed RTR packets to port 1967.
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/cisco-sa-20030515-saa.shtml; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5608; http://www.cisco.com/warp/public/707/cisco-sa-20030515-saa.shtml
CVE: CVE-2003-0306
Published: 2003-06-09
Description: Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.ini file with a long .ShellClassInfo parameter.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6310&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5036&w=2; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]6289&w=2
CVE: CVE-2003-0307
Published: 2003-06-09
Description: Poster version.two allows remote authenticated users to gain administrative privileges by appending the "|" field separator and an "admin" value into the email address field.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4969&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4969&w=2
CVE: CVE-2003-0309
Published: 2003-06-09
Description: Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which eventually cause Internet Explorer to execute the program, as demonstrated using a large number of FRAME or IFRAME tags, aka the "File Download Dialog Vulnerability."
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3214&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5040&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]6096&w=2
CVE: CVE-2003-0318
Published: 2003-06-09
Description: Cross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier allows remote attackers to insert arbitrary web script via the year parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8834&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8834&w=2
CVE: CVE-2003-0319
Published: 2003-06-09
Description: Buffer overflow in the IMAP server (IMAPMax) for SmartMax MailMax 5.0.10.8 and earlier allows remote authenticated users to execute arbitrary code via a long SELECT command.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0072.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7291&w=2; http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0072.html
CVE: CVE-2003-0320
Published: 2003-06-09
Description: header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms_user_admin parameter to "1" and modifying the admin_root parameter to point to a URL that contains a Trojan horse header.inc.php script.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2990&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2990&w=2
CVE: CVE-2003-0321
Published: 2003-06-09
Description: Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions (1) send_ctcp, (2) cannot_join_channel, (3) cluster, (4) BX_compress_modes, (5) handle_oper_vision, and (6) ban_it.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000655; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8322&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1913&w=2
CVE: CVE-2003-0322
Published: 2003-06-09
Description: Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service (crash).
CVSS Score: 5.0 (MEDIUM)
References: http://security.debian.org/pool/updates/main/i/ircii-pana/ircii-pana_1.0-0c16-2.1.diff.gz; http://www.debian.org/security/2003/dsa-306; http://security.debian.org/pool/updates/main/i/ircii-pana/ircii-pana_1.0-0c16-2.1.diff.gz
CVE: CVE-2003-0323
Published: 2003-06-09
Description: Multiple buffer overflows in ircII 20020912 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via responses that are not properly fed to the my_strcat function by (1) ctcp_buffer, (2) cannot_join_channel, (3) status_make_printable for Statusbar drawing, (4) create_server_list, and possibly other functions.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8322&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2926&w=2; http://www.debian.org/security/2003/dsa-291
CVE: CVE-2003-0324
Published: 2003-06-09
Description: Buffer overflows in EPIC IRC Client (EPIC4) 1.0.1 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long replies that are not properly handled by the (1) userhost_cmd_returned function, or (2) Statusbar capability.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8322&w=2; http://www.debian.org/security/2003/dsa-287; http://www.securityfocus.com/bid/7091
CVE: CVE-2003-0325
Published: 2003-06-09
Description: Buffer overflow in Maelstrom 3.0.6, 3.0.5, and earlier allows local users to execute arbitrary code via a long -server command line argument.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3887&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1344&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3217&w=2
CVE: CVE-2003-0326
Published: 2003-06-09
Description: Integer overflow in parse_decode_path() of slocate may allow attackers to execute arbitrary code via a LOCATE_PATH with a large number of ":" (colon) characters, whose count is used in a call to malloc.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2626&w=2; http://www.securityfocus.com/bid/7629; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2626&w=2
CVE: CVE-2003-0328
Published: 2003-06-09
Description: EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.prbh.org/pub/epic/patches/alloca_underrun-patch-1; http://www.debian.org/security/2003/dsa-306; http://www.debian.org/security/2003/dsa-399
CVE: CVE-2003-0329
Published: 2003-06-09
Description: CesarFTP 0.99g stores user names and passwords in plaintext in the settings.ini file, which could allow local users to gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0074.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0315&w=2; http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0074.html
CVE: CVE-2003-0330
Published: 2003-06-09
Description: Buffer overflow in unknown versions of Maelstrom allows local users to execute arbitrary code via a long -player command line argument.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5369&w=2; http://www.securitytracker.com/id?1008832; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5369&w=2
CVE: CVE-2003-0331
Published: 2003-06-09
Description: SQL injection vulnerability in ttForum allows remote attackers to execute arbitrary SQL and gain ttForum Administrator privileges via the Ignorelist-Textfield argument in the Preferences page.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0334&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0334&w=2
CVE: CVE-2003-0332
Published: 2003-06-09
Description: The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a security check, which allows remote attackers to bypass authentication via a filename with a .ats extension instead of a .hts extension.
CVSS Score: 7.6 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0075.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4169&w=2; http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0075.html
CVE: CVE-2003-0355
Published: 2003-06-09
Description: Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/320707; http://www.securityfocus.com/archive/1/320707
CVE: CVE-2003-0356
Published: 2003-06-09
Description: Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync, (9) SMB, (10) SMPP, and (11) TSP dissectors, which do not properly use the tvb_get_nstringz and tvb_get_nstringz0 functions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-193
References: http://www.debian.org/security/2003/dsa-313; http://www.ethereal.com/appnotes/enpa-sa-00009.html; http://www.kb.cert.org/vuls/id/641013
CVE: CVE-2003-0357
Published: 2003-06-09
Description: Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) Mount and (2) PPP dissectors.
CVSS Score: 7.5 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2003-077.html; http://www.debian.org/security/2003/dsa-313; http://www.ethereal.com/appnotes/enpa-sa-00009.html
CVE: CVE-2003-0358
Published: 2003-06-09
Description: Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-120
References: http://nethack.sourceforge.net/v340/bugmore/secpatch.txt; http://www.debian.org/security/2003/dsa-316; http://www.debian.org/security/2003/dsa-350
CVE: CVE-2003-0360
Published: 2003-06-09
Description: Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://gps.seul.org/changelog.html; http://www.debian.org/security/2003/dsa-307; http://gps.seul.org/changelog.html
CVE: CVE-2003-0361
Published: 2003-06-09
Description: gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp.
CVSS Score: 7.5 (HIGH)
References: http://gps.seul.org/changelog.html; http://www.debian.org/security/2003/dsa-307; http://gps.seul.org/changelog.html
CVE: CVE-2003-0362
Published: 2003-06-09
Description: Buffer overflow in gPS before 0.10.2 may allow local users to cause a denial of service (SIGSEGV) in rgpsp via long command lines.
CVSS Score: 5.0 (MEDIUM)
References: http://gps.seul.org/changelog.html; http://www.debian.org/security/2003/dsa-307; http://gps.seul.org/changelog.html
CVE: CVE-2003-0420
Published: 2003-06-13
Description: Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the account running the tool.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/9025/; http://www.auscert.org.au/render.html?it=3165; http://www.kb.cert.org/vuls/id/JPLA-5NTL8E
CVE: CVE-2002-1155
Published: 2003-06-16
Description: Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2376&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6710&w=2; http://www.mandriva.com/security/advisories?name=MDKSA-2003:064
CVE: CVE-2002-1565
Published: 2003-06-16
Description: Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long URL.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-003.0.txt; ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000716
CVE: CVE-2003-0195
Published: 2003-06-16
Description: CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (631), which does not time out.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000678; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4449&w=2; http://www.debian.org/security/2003/dsa-317
CVE: CVE-2003-0217
Published: 2003-06-16
Description: Cross-site scripting (XSS) vulnerability in Neoteris Instant Virtual Extranet (IVE) 3.01 and earlier allows remote attackers to insert arbitrary web script and bypass authentication via a certain CGI script.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7480&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7480&w=2
CVE: CVE-2003-0246
Published: 2003-06-16
Description: The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports.
CVSS Score: 3.6 (LOW)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0076.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6555&w=2; http://www.debian.org/security/2003/dsa-311
CVE: CVE-2003-0247
Published: 2003-06-16
Description: Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service ("kernel oops").
CVSS Score: 5.0 (MEDIUM)
References: http://www.debian.org/security/2003/dsa-311; http://www.debian.org/security/2003/dsa-312; http://www.debian.org/security/2003/dsa-332
CVE: CVE-2003-0248
Published: 2003-06-16
Description: The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.
CVSS Score: 10.0 (HIGH)
References: http://www.debian.org/security/2003/dsa-311; http://www.debian.org/security/2003/dsa-312; http://www.debian.org/security/2003/dsa-332
CVE: CVE-2003-0270
Published: 2003-06-16
Description: The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet or non-WEP connections.
CVSS Score: 7.6 (HIGH)
References: http://secunia.com/advisories/8773; http://securitytracker.com/id?1006742; http://www.atstake.com/research/advisories/2003/a051203-1.txt
CVE: CVE-2003-0275
Published: 2003-06-16
Description: SSI.php in YaBB SE 1.5.2 allows remote attackers to execute arbitrary PHP code by modifying the sourcedir parameter to reference a URL on a remote web server that contains the code.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9988&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9988&w=2
CVE: CVE-2003-0276
Published: 2003-06-16
Description: Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GET request with a large number of / characters.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2718&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0250&w=2; http://www.securityfocus.com/bid/7555
CVE: CVE-2003-0277
Published: 2003-06-16
Description: Directory traversal vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the file parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4262&w=2; http://www.securityfocus.com/bid/7559; https://exchange.xforce.ibmcloud.com/vulnerabilities/11987
CVE: CVE-2003-0278
Published: 2003-06-16
Description: Cross-site scripting (XSS) vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to insert arbitrary web script via the file parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4262&w=2; http://www.securityfocus.com/bid/7557; https://exchange.xforce.ibmcloud.com/vulnerabilities/11988
CVE: CVE-2003-0279
Published: 2003-06-16
Description: Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5 allows remote attackers to steal sensitive information via numeric fields, as demonstrated using (1) the viewlink function and cid parameter, or (2) index.php.
CVSS Score: 2.6 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2003-05/0147.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2980&w=2; http://www.securityfocus.com/bid/7558
CVE: CVE-2003-0280
Published: 2003-06-16
Description: Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0062.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1349&w=2; http://www.securityfocus.com/bid/7547
CVE: CVE-2003-0281
Published: 2003-06-16
Description: Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_inet_server, (2) gds_lock_mgr, or (3) gds_drop.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2997&w=2; http://seclists.org/lists/bugtraq/2002/Jun/0212.html; http://secunia.com/advisories/8758
CVE: CVE-2003-0282
Published: 2003-06-16
Description: Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence.
CVSS Score: 2.6 (LOW)
References: ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-031.0.txt; ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-031.0.txt; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000672
CVE: CVE-2003-0283
Published: 2003-06-16
Description: Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject arbitrary web script and HTML tags via a message with a "<<" before a tag name in the (1) subject, (2) author's name, or (3) author's e-mail.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1533&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5394&w=2; http://www.securityfocus.com/bid/7545
CVE: CVE-2003-0284
Published: 2003-06-16
Description: Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the Plug-ins folder that spread to other PDF documents, as demonstrated by the W32.Yourde virus.
CVSS Score: 7.5 (HIGH)
References: http://www.adobe.com/support/downloads/detail.jsp?ftpID=2121; http://www.kb.cert.org/vuls/id/184820; http://www.adobe.com/support/downloads/detail.jsp?ftpID=2121
CVE: CVE-2003-0285
Published: 2003-06-16
Description: IBM AIX 5.2 and earlier distributes Sendmail with a configuration file (sendmail.cf) with the (1) promiscuous_relay, (2) accept_unresolvable_domains, and (3) accept_unqualified_senders features enabled, which allows Sendmail to be used as an open mail relay for sending spam e-mail.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8961&w=2; http://security.sdsc.edu/advisories/2003.05.13-AIX-sendmail.txt; http://www.kb.cert.org/vuls/id/814617
CVE: CVE-2003-0286
Published: 2003-06-16
Description: SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0067.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1134&w=2; http://osvdb.org/56166
CVE: CVE-2003-0287
Published: 2003-06-16
Description: Cross-site scripting (XSS) vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via the Name textbox, possibly when the "Allow HTML in comments?" option is enabled.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2636&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2079&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7655&w=2
CVE: CVE-2003-0288
Published: 2003-06-16
Description: Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7610&w=2; http://www.lac.co.jp/security/english/snsadv_e/64_e.html; http://www.securityfocus.com/bid/7566
CVE: CVE-2003-0289
Published: 2003-06-16
Description: Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.berlios.de/pub/cdrecord/alpha/cdrtools-2.01a14.tar.gz; http://forums.gentoo.org/viewtopic.php?t=54904; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7225&w=2
CVE: CVE-2003-0290
Published: 2003-06-16
Description: Memory leak in eServ 2.9x allows remote attackers to cause a denial of service (memory exhaustion) via a large number of connections, whose memory is not freed when the connection is terminated.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0064.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8137&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8187&w=2