deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-1160
Published: 2003-10-30
Description: FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges via an HTTP request to aindex.htm that contains double leading slashes (//).
CVSS Score: 10.0 (HIGH)
References: http://packetstormsecurity.nl/0310-exploits/FlexWATCH.txt; http://secunia.com/advisories/10132; http://securitytracker.com/id?1008049
CVE: CVE-2003-1194
Published: 2003-10-30
Description: Cross-site scripting (XSS) vulnerability in Booby .1 through 0.2.3 allows remote attackers to inject arbitrary web script or HTML via the error message.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/10110; http://securitytracker.com/id?1008056; http://sourceforge.net/project/shownotes.php?release_id=193878
CVE: CVE-2003-1197
Published: 2003-10-30
Description: Cross-site scripting (XSS) vulnerability in index.php for Ledscripts.com LedForums Beta 1 allows remote attackers to inject arbitrary web script or HTML via the (1) top_message parameter or (2) topic field of a new thread.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/10113; http://www.securityfocus.com/archive/1/342913; http://www.securityfocus.com/bid/8934
CVE: CVE-2003-1159
Published: 2003-10-31
Description: Plug and Play Web Server Proxy 1.0002c allows remote attackers to cause a denial of service (server crash) via an invalid URI in an HTTP GET request to TCP port 8080.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-10/0343.html; http://secunia.com/advisories/10131; http://www.osvdb.org/2764
CVE: CVE-2003-1187
Published: 2003-11-02
Description: Cross-site scripting (XSS) vulnerability in include.php in PHPKIT 1.6.02 and 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the contact_email parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://badwebmasters.net/advisory/017/; http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013139.html; http://www.securityfocus.com/bid/8960
CVE: CVE-2003-1188
Published: 2003-11-02
Description: Unichat allows remote attackers to cause a denial of service (crash) by adding extra chat characters (avatars) and logging in to a chat room, as demonstrated using duplicate ACTOR entries in u2res000.rit.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/10163; http://www.osvdb.org/2844; http://www.securityfocus.com/archive/1/343182
CVE: CVE-2002-1570
Published: 2003-11-03
Description: Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat to write variable data past the end of an array.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000696; http://www.securityfocus.com/archive/1/248141; http://www.securityfocus.com/bid/3780
CVE: CVE-2003-0542
Published: 2003-11-03
Description: Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.6/SCOSA-2004.6.txt; ftp://patches.sgi.com/support/free/security/advisories/20031203-01-U.asc; ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc
CVE: CVE-2003-0683
Published: 2003-11-03
Description: NFS in SGI 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an /etc/exports entry uses wildcards without any hostnames or groups, which could allow attackers to bypass intended restrictions.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20031004-01-P; http://secunia.com/advisories/10095; http://www.osvdb.org/2734
CVE: CVE-2003-0789
Published: 2003-11-03
Description: mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could cause Apache to send the output of a CGI program to the wrong client.
CVSS Score: 10.0 (HIGH)
References: http://apache.secsup.org/dist/httpd/Announcement2.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000775; http://docs.info.apple.com/article.html?artnum=61798
CVE: CVE-2003-0855
Published: 2003-11-03
Description: Pan 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news post with a long author email address.
CVSS Score: 7.8 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc; http://bugzilla.gnome.org/show_bug.cgi?id=107025; http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=107519
CVE: CVE-2003-0871
Published: 2003-11-03
Description: Unknown vulnerability in QuickTime Java in Mac OS X v10.3 and Mac OS X Server 10.3 allows attackers to gain "unauthorized access to a system."
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/mhonarc/security-announce/msg00039.html; http://www.securityfocus.com/bid/8922; http://lists.apple.com/mhonarc/security-announce/msg00039.html
CVE: CVE-2003-0876
Published: 2003-11-03
Description: Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have less restrictive permissions than intended.
CVSS Score: 2.1 (LOW)
References: http://www.atstake.com/research/advisories/2003/a102803-1.txt; http://www.securityfocus.com/bid/8916; http://www.securityfocus.com/bid/8917
CVE: CVE-2003-0877
Published: 2003-11-03
Description: Mac OS X before 10.3 with core files enabled allows local users to overwrite arbitrary files and read core files via a symlink attack on core files that are created with predictable names in the /cores directory.
CVSS Score: 4.6 (MEDIUM)
References: http://www.atstake.com/research/advisories/2003/a102803-1.txt; http://www.securityfocus.com/bid/8914; http://www.securityfocus.com/bid/8917
CVE: CVE-2003-0878
Published: 2003-11-03
Description: slpd daemon in Mac OS X before 10.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2003-0875.
CVSS Score: 2.1 (LOW)
References: http://docs.info.apple.com/article.html?artnum=61798; http://lists.apple.com/mhonarc/security-announce/msg00038.html; http://docs.info.apple.com/article.html?artnum=61798
CVE: CVE-2003-0880
Published: 2003-11-03
Description: Unknown vulnerability in Mac OS X before 10.3 allows local users to access Dock functions from behind Screen Effects when Full Keyboard Access is enabled using the Keyboard pane in System Preferences.
CVSS Score: 4.6 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=61798; http://lists.apple.com/mhonarc/security-announce/msg00038.html; http://docs.info.apple.com/article.html?artnum=61798
CVE: CVE-2003-0881
Published: 2003-11-03
Description: Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by sniffing the password.
CVSS Score: 7.5 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=61798; http://lists.apple.com/mhonarc/security-announce/msg00038.html; http://docs.info.apple.com/article.html?artnum=61798
CVE: CVE-2003-0882
Published: 2003-11-03
Description: Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet.
CVSS Score: 5.0 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=61798; http://lists.apple.com/mhonarc/security-announce/msg00038.html; http://docs.info.apple.com/article.html?artnum=61798
CVE: CVE-2003-0883
Published: 2003-11-03
Description: The System Preferences capability in Mac OS X before 10.3 allows local users to access secure Preference Panes for a short period after an administrator has authenticated to the system.
CVSS Score: 4.6 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=61798; http://lists.apple.com/mhonarc/security-announce/msg00038.html; http://docs.info.apple.com/article.html?artnum=61798
CVE: CVE-2003-0895
Published: 2003-11-03
Description: Buffer overflow in the Mac OS X kernel 10.2.8 and earlier allows local users, and possibly remote attackers, to cause a denial of service (crash), access portions of memory, and possibly execute arbitrary code via a long command line argument (argv[]).
CVSS Score: 4.6 (MEDIUM)
References: http://lists.apple.com/mhonarc/security-announce/msg00038.html; http://www.atstake.com/research/advisories/2003/a102803-3.txt; http://www.securityfocus.com/bid/8913
CVE: CVE-2003-0899
Published: 2003-11-03
Description: Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' characters, which trigger the overflow when the characters are expanded to "&lt;" and "&gt;" sequences.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-131
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4252&w=2; http://secunia.com/advisories/10092; http://www.osvdb.org/2729
CVE: CVE-2003-0901
Published: 2003-11-03
Description: Buffer overflow in to_ascii for PostgreSQL 7.2.x, and 7.3.x before 7.3.4, allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://developer.postgresql.org/cvsweb.cgi/pgsql-server/src/backend/utils/adt/ascii.c; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000784; http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000772
CVE: CVE-2003-1142
Published: 2003-11-03
Description: Help in NIPrint LPD-LPR Print Server 4.10 and earlier executes Windows Explorer with SYSTEM privileges, which allows local users to gain privileges.
CVSS Score: 10.0 (HIGH)
References: http://www.securityfocus.com/archive/1/343258; http://www.securityfocus.com/bid/8969; https://exchange.xforce.ibmcloud.com/vulnerabilities/13592
CVE: CVE-2003-1145
Published: 2003-11-03
Description: Cross-site scripting (XSS) vulnerability in friendmail.php in OpenAutoClassifieds 1.0 allows remote attackers to inject arbitrary web script or HTML via the listing parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/10138; http://www.osvdb.org/2767; http://www.securityfocus.com/archive/1/343806
CVE: CVE-2003-1182
Published: 2003-11-03
Description: Cross-site scripting (XSS) vulnerability in MPM Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML via the lng parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/10122; http://www.osvdb.org/2754; http://www.securityfocus.com/bid/8958
CVE: CVE-2003-1184
Published: 2003-11-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in ThWboard Beta 2.8 and 2.81 allow remote attackers to inject arbitrary web script or HTML via (1) time in board.php, (2) the profile Homepage-Feld, (3) pictures, and (4) other "Diverse XSS Bugs."
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/10120; http://sourceforge.net/project/shownotes.php?release_id=195009; http://www.osvdb.org/3077
CVE: CVE-2003-1185
Published: 2003-11-03
Description: Multiple SQL injection vulnerabilities in ThWboard before Beta 2.8.2 allow remote attackers to inject arbitrary SQL commands via various vectors including (1) Admin-Center, (2) Announcements, (3) admin/calendar.php, and (4) showevent.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/10120; http://sourceforge.net/project/shownotes.php?release_id=195009; http://www.osvdb.org/2758
CVE: CVE-2003-1190
Published: 2003-11-03
Description: Cross-site scripting (XSS) vulnerability in PHPRecipeBook 1.24 through 2.17 allows remote attackers to inject arbitrary web script or HTML via a recipe.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/10109; http://sourceforge.net/project/shownotes.php?release_id=193940; http://www.osvdb.org/2755
CVE: CVE-2003-1192
Published: 2003-11-03
Description: Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/10107; http://securitytracker.com/id?1008075; http://www.derkeiler.com/Mailing-Lists/VulnWatch/2003-11/0001.html
CVE: CVE-2003-1193
Published: 2003-11-03
Description: Multiple SQL injection vulnerabilities in the Portal DB (1) List of Values (LOVs), (2) Forms, (3) Hierarchy, and (4) XML components packages in Oracle Oracle9i Application Server 9.0.2.00 through 3.0.9.8.5 allow remote attackers to execute arbitrary SQL commands via the URL.
CVSS Score: 7.5 (HIGH)
References: http://otn.oracle.com/deploy/security/pdf/2003alert61.pdf; http://www.securityfocus.com/archive/1/343520; http://www.securityfocus.com/bid/8966
CVE: CVE-2003-1196
Published: 2003-11-03
Description: SQL injection vulnerability in viewtopic.asp in VieBoard 2.6 allows remote attackers to execute arbitrary SQL commands via the forumid parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.osvdb.org/2789; http://www.securityfocus.com/bid/8967; http://www.vienuke.com/vie/viewtopic.asp?forumid=43&id=2822&page=1
CVE: CVE-2003-1141
Published: 2003-11-04
Description: Buffer overflow in NIPrint 4.10 allows remote attackers to execute arbitrary code via a long string to TCP port 515.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/10143; http://www.osvdb.org/2774; http://www.securityfocus.com/archive/1/343257
CVE: CVE-2003-1144
Published: 2003-11-04
Description: Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013231.html; http://secunia.com/advisories/10136; http://securitytracker.com/id?1008093
CVE: CVE-2003-0626
Published: 2003-11-13
Description: psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the (1) headername or (2) footername arguments.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0042.html; http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013652.html; http://www.auscert.org.au/render.html?it=3610
CVE: CVE-2001-1411
Published: 2003-11-17
Description: Format string vulnerability in gm4 (aka m4) on Mac OS X may allow local users to gain privileges if gm4 is called by setuid programs.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/mhonarc/security-announce/msg00038.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4229&w=2; http://www.iss.net/security_center/static/10174.php
CVE: CVE-2001-1412
Published: 2003-11-17
Description: nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the password file by specifying passwd as a command line argument.
CVSS Score: 2.1 (LOW)
References: http://lists.apple.com/mhonarc/security-announce/msg00038.html; http://lists.insecure.org/lists/bugtraq/2002/Sep/0128.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2104&w=2
CVE: CVE-2002-1568
Published: 2003-11-17
Description: OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to cause a denial of service (crash) via certain messages that cause OpenSSL to abort from a failed assertion, as demonstrated using SSLv2 CLIENT_MASTER_KEY messages, which are not properly handled in s2_srvr.c.
CVSS Score: 5.0 (MEDIUM)
References: http://cvs.openssl.org/chngview?cn=7659; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4983; http://www.ebitech.sk/patrik/SA/SA-20031002.txt
CVE: CVE-2002-1569
Published: 2003-11-17
Description: gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for (1) a PDF file or (2) a gzip file.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0033.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9076&w=2; http://www.epita.fr/~bevand_m/asa/asa-0000
CVE: CVE-2003-0543
Published: 2003-11-17
Description: Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.
CVSS Score: 5.0 (MEDIUM)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=104893; http://secunia.com/advisories/22249; http://sunsolve.sun.com/search/document.do?assetkey=1-66-201029-1
CVE: CVE-2003-0544
Published: 2003-11-17
Description: OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used.
CVSS Score: 5.0 (MEDIUM)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=104893; http://secunia.com/advisories/22249; http://sunsolve.sun.com/search/document.do?assetkey=1-66-201029-1
CVE: CVE-2003-0545
Published: 2003-11-17
Description: Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: http://secunia.com/advisories/22249; http://www-1.ibm.com/support/docview.wss?uid=swg21247112; http://www.cert.org/advisories/CA-2003-26.html
CVE: CVE-2003-0659
Published: 2003-11-17
Description: Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_DIR messages to ListBox or (2) CB_DIR messages to ComboBox controls in a privileged application.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7035&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]8343&w=2; http://www.cert.org/advisories/CA-2003-27.html
CVE: CVE-2003-0660
Published: 2003-11-17
Description: The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers to execute arbitrary code without user approval.
CVSS Score: 7.5 (HIGH)
References: http://www.cert.org/advisories/CA-2003-27.html; http://www.kb.cert.org/vuls/id/838572; http://www.securityfocus.com/bid/8830
CVE: CVE-2003-0662
Published: 2003-11-17
Description: Buffer overflow in Troubleshooter ActiveX Control (Tshoot.ocx) in Microsoft Windows 2000 SP4 and earlier allows remote attackers to execute arbitrary code via an HTML document with a long argument to the RunQuery2 method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0015.html; http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012205.html; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]9608&w=2
CVE: CVE-2003-0711
Published: 2003-11-17
Description: Stack-based buffer overflow in the PCHealth system in the Help and Support Center function in Windows XP and Windows Server 2003 allows remote attackers to execute arbitrary code via a long query in an HCP URL.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5696&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]9632&w=2; http://www.cert.org/advisories/CA-2003-27.html
CVE: CVE-2003-0712
Published: 2003-11-17
Description: Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web Access (OWA) allows remote attackers to execute arbitrary web script.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5915&w=2; http://www.cert.org/advisories/CA-2003-27.html; http://www.kb.cert.org/vuls/id/435444
CVE: CVE-2003-0714
Published: 2003-11-17
Description: The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion) by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6586&w=2; http://www.cert.org/advisories/CA-2003-27.html; http://www.kb.cert.org/vuls/id/422156
CVE: CVE-2003-0717
Published: 2003-11-17
Description: The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2158&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]9562&w=2; http://www.cert.org/advisories/CA-2003-27.html
CVE: CVE-2003-0786
Published: 2003-11-17
Description: The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010812.html; http://www.kb.cert.org/vuls/id/602204; http://www.openssh.com/txt/sshpam.adv
CVE: CVE-2003-0787
Published: 2003-11-17
Description: The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010812.html; http://www.kb.cert.org/vuls/id/209807; http://www.openssh.com/txt/sshpam.adv
CVE: CVE-2003-0790
Published: 2003-11-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: the reported issue is not a vulnerability or exposure.  Notes: This candidate was assigned to a "head-reading" bug in a component of fetchmail 6.2.4 and earlier, which was claimed to allow a denial of service.  However, the bug is in a broken component of fetchmail that is not "reachable" by any execution path, so it cannot be triggered by any sort of attack and is not exploitable
CVE: CVE-2003-0792
Published: 2003-11-17
Description: Fetchmail 6.2.4 and earlier does not properly allocate memory for long lines, which allows remote attackers to cause a denial of service (crash) via a certain email.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-004.0/CSSA-2004-004.0.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7401&w=2; http://security.gentoo.org/glsa/glsa-200403-10.xml
CVE: CVE-2003-0793
Published: 2003-11-17
Description: GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not restrict the size of input, which allows attackers to cause a denial of service (memory consumption).
CVSS Score: 2.1 (LOW)
References: http://cvs.gnome.org/bonsai/cvsblame.cgi?file=gdm2/NEWS&rev=&root=/cvs/gnome; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000766; http://www.mandriva.com/security/advisories?name=MDKSA-2003:100
CVE: CVE-2003-0794
Published: 2003-11-17
Description: GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not limit the number or duration of commands and uses a blocking socket connection, which allows attackers to cause a denial of service (resource exhaustion) by sending commands and not reading the results.
CVSS Score: 2.1 (LOW)
References: http://cvs.gnome.org/bonsai/cvsblame.cgi?file=gdm2/NEWS&rev=&root=/cvs/gnome; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000766; http://www.mandriva.com/security/advisories?name=MDKSA-2003:100