deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-0764
Published: 2003-09-17
Description: Escapade Scripting Engine (ESP) allows remote attackers to obtain sensitive path information via a malformed request, which leaks the information in an error message, as demonstrated using the PAGE parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1197&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1197&w=2
CVE: CVE-2003-0765
Published: 2003-09-17
Description: The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2112&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2112&w=2
CVE: CVE-2003-0766
Published: 2003-09-17
Description: Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious servers to execute arbitrary code via (1) a long FTP banner, (2) a long response to a USER command, or (3) a long response to a PASS command.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0604&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0604&w=2
CVE: CVE-2003-0767
Published: 2003-09-17
Description: Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and 0.27 and earlier for Linux and BSD, allows remote attackers to cause a denial of service and execute arbitrary code via a client request with a large length value.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3758&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3758&w=2
CVE: CVE-2003-0693
Published: 2003-09-22
Description: A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010103.html; http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010135.html; http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010146.html
CVE: CVE-2003-0722
Published: 2003-09-22
Description: The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0115.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4331&w=2; http://secunia.com/advisories/9742
CVE: CVE-2003-0768
Published: 2003-09-22
Description: Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null character in the beginning of a tag name.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6062&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6062&w=2
CVE: CVE-2003-0769
Published: 2003-09-22
Description: Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attackers to insert arbitrary web script and HTML via the message field.
CVSS Score: 4.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2003-0769; https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2003-0769
CVE: CVE-2003-0770
Published: 2003-09-22
Description: FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5972&w=2; http://www.securityfocus.com/archive/1/317234; http://www.securityfocus.com/archive/1/336598
CVE: CVE-2003-0771
Published: 2003-09-22
Description: Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4921&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4921&w=2
CVE: CVE-2003-0772
Published: 2003-09-22
Description: Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2868&w=2; http://secunia.com/advisories/9671; http://www.kb.cert.org/vuls/id/219140
CVE: CVE-2003-0773
Published: 2003-09-22
Description: saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt; http://www.debian.org/security/2003/dsa-379; http://www.mandriva.com/security/advisories?name=MDKSA-2003:099
CVE: CVE-2003-0774
Published: 2003-09-22
Description: saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service (segmentation fault) when invalid memory is accessed.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt; http://www.debian.org/security/2003/dsa-379; http://www.mandriva.com/security/advisories?name=MDKSA-2003:099
CVE: CVE-2003-0775
Published: 2003-09-22
Description: saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service (memory consumption or crash).
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt; http://www.debian.org/security/2003/dsa-379; http://www.mandriva.com/security/advisories?name=MDKSA-2003:099
CVE: CVE-2003-0776
Published: 2003-09-22
Description: saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt; http://www.debian.org/security/2003/dsa-379; http://www.mandriva.com/security/advisories?name=MDKSA-2003:099
CVE: CVE-2003-0777
Published: 2003-09-22
Description: saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service (segmentation fault).
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt; http://www.debian.org/security/2003/dsa-379; http://www.mandriva.com/security/advisories?name=MDKSA-2003:099
CVE: CVE-2003-0778
Published: 2003-09-22
Description: saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow attackers to cause a denial of service (memory consumption).
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt; http://www.debian.org/security/2003/dsa-379; http://www.mandriva.com/security/advisories?name=MDKSA-2003:099
CVE: CVE-2003-0779
Published: 2003-09-22
Description: SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string.
CVSS Score: 7.5 (HIGH)
References: http://www.atstake.com/research/advisories/2003/a091103-1.txt; http://www.atstake.com/research/advisories/2003/a091103-1.txt
CVE: CVE-2003-0780
Published: 2003-09-22
Description: Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.
CVSS Score: 9.0 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000743; http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009819.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9993&w=2
CVE: CVE-2003-1053
Published: 2003-10-03
Description: Multiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long (1) -KCONV command line option or (2) XSHISENLIB environment variable.
CVSS Score: 4.6 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=213957; http://secunia.com/advisories/9950; http://www.securityfocus.com/bid/8770
CVE: CVE-2002-1567
Published: 2003-10-06
Description: Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/vuln-dev/2002-q3/0482.html; http://tomcat.apache.org/security-4.html; https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
CVE: CVE-2003-0680
Published: 2003-10-06
Description: Unknown vulnerability in NFS for SGI IRIX 6.5.21 and earlier may allow an NFS client to bypass read-only restrictions.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20030901-01-P; ftp://patches.sgi.com/support/free/security/advisories/20030901-01-P
CVE: CVE-2003-0681
Published: 2003-10-06
Description: A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000742; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5742&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9274&w=2
CVE: CVE-2003-0682
Published: 2003-10-06
Description: "Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000741; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2230&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0492&w=2
CVE: CVE-2003-0690
Published: 2003-10-06
Description: KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module.
CVSS Score: 10.0 (HIGH)
References: http://cert.uni-stuttgart.de/archive/suse/security/2002/12/msg00101.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000747; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3499&w=2
CVE: CVE-2003-0692
Published: 2003-10-06
Description: KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session.
CVSS Score: 7.5 (HIGH)
References: http://cert.uni-stuttgart.de/archive/suse/security/2002/12/msg00101.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000747; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3499&w=2
CVE: CVE-2003-0694
Published: 2003-10-06
Description: The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
CVSS Score: 10.0 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.11/SCOSA-2004.11.txt; http://archives.neohapsis.com/archives/fulldisclosure/2003-q3/4119.html; http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0113.html
CVE: CVE-2003-0695
Published: 2003-10-06
Description: Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffer_free in buffer.c, or (3) a separate function in channels.c, a different vulnerability than CVE-2003-0693.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000741; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2230&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0332&w=2
CVE: CVE-2003-0697
Published: 2003-10-06
Description: Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows local users to cause a denial of service (crash) or gain root privileges.
CVSS Score: 7.2 (HIGH)
References: http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2003.1605.1; http://www-1.ibm.com/support/search.wss?rs=0&q=IY45250&apar=only; http://www-1.ibm.com/support/search.wss?rs=0&q=IY45344&apar=only
CVE: CVE-2003-0742
Published: 2003-10-06
Description: SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to run as if it were called from ncsa_httpd, then modifying the PATH environment variable to point to a malicious "hostname" program.
CVSS Score: 7.2 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2003-0742; https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2003-0742
CVE: CVE-2003-0758
Published: 2003-10-06
Description: Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users to gain root privileges via a long command line argument.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0114.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8721&w=2; http://www.ciac.org/ciac/bulletins/n-154.shtml
CVE: CVE-2003-0759
Published: 2003-10-06
Description: Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privileges via a long command line argument.
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aixv7/FP10a_U495172/FixpakReadme.txt; http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0114.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8721&w=2
CVE: CVE-2003-0783
Published: 2003-10-06
Description: Multiple buffer overflows in hztty 2.0 allow local users to gain root privileges.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4417&w=2; http://secunia.com/advisories/9792; http://securitytracker.com/id?1007756
CVE: CVE-2003-0784
Published: 2003-10-06
Description: Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that contains format string specifiers.
CVSS Score: 10.0 (HIGH)
References: http://www-1.ibm.com/support/search.wss?rs=0&q=IY47764&apar=only; http://www-1.ibm.com/support/search.wss?rs=0&q=IY47764&apar=only
CVE: CVE-2003-0785
Published: 2003-10-06
Description: ipmasq before 3.5.12, in certain configurations, may forward packets to the external interface even if the packets are not associated with an established connection, which could allow remote attackers to bypass intended filtering.
CVSS Score: 7.5 (HIGH)
References: http://www.debian.org/security/2003/dsa-389; http://www.debian.org/security/2003/dsa-389
CVE: CVE-2003-0801
Published: 2003-10-06
Description: Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute arbitrary web script and steal cookies via a URL to the docs/ directory that contains the script.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.atstake.com/research/advisories/2003/a091503-1.txt; http://www.atstake.com/research/advisories/2003/a091503-1.txt
CVE: CVE-2003-0802
Published: 2003-10-06
Description: Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root, and the physical path of the NED server, via a "retrieve" action with a location parameter of . (dot).
CVSS Score: 5.0 (MEDIUM)
References: http://www.atstake.com/research/advisories/2003/a091503-1.txt; http://www.atstake.com/research/advisories/2003/a091503-1.txt
CVE: CVE-2003-0803
Published: 2003-10-06
Description: Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user.
CVSS Score: 7.5 (HIGH)
References: http://www.atstake.com/research/advisories/2003/a091503-1.txt; http://www.atstake.com/research/advisories/2003/a091503-1.txt
CVE: CVE-2003-0805
Published: 2003-10-06
Description: Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command, and (2) the GSisText function, which calculates the view-type.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2211&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0717&w=2; http://www.debian.org/security/2003/dsa-387
CVE: CVE-2003-0826
Published: 2003-10-06
Description: lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack.
CVSS Score: 7.5 (HIGH)
References: http://bugs.debian.org/211662; http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010496.html; http://lists.lysator.liu.se/pipermail/lsh-bugs/2003q3/000120.html
CVE: CVE-2003-0827
Published: 2003-10-06
Description: The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service (crash) via a long packet to UDP port 523.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9636&w=2; http://www-1.ibm.com/support/search.wss?rs=0&q=IY47686&apar=only; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9636&w=2
CVE: CVE-2003-0791
Published: 2003-10-07
Description: The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://secunia.com/advisories/11103/; http://www.mandriva.com/security/advisories?name=MDKSA-2004:021; http://www.osvdb.org/8390
CVE: CVE-2003-1061
Published: 2003-10-14
Description: Race condition in Solaris 2.6 through 9 allows local users to cause a denial of service (kernel panic), as demonstrated via the namefs function, pipe, and certain STREAMS routines.
CVSS Score: 1.2 (LOW)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-57080-1; http://www.securityfocus.com/bid/8836; https://exchange.xforce.ibmcloud.com/vulnerabilities/13434
CVE: CVE-2003-1062
Published: 2003-10-15
Description: Unknown vulnerability in the sysinfo system call for Solaris for SPARC 2.6 through 9, and Solaris for x86 2.6, 7, and 8, allows local users to read kernel memory.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/10006/; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57340-1; http://www.securityfocus.com/bid/8831
CVE: CVE-2003-0347
Published: 2003-10-20
Description: Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0093.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9157&w=2; http://secunia.com/advisories/9666
CVE: CVE-2003-0630
Published: 2003-10-20
Description: Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator (atari800) before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrated with the -osa_rom argument.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1901&w=2; http://www.debian.org/security/2003/dsa-359; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1901&w=2
CVE: CVE-2003-0658
Published: 2003-10-20
Description: Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files via a certain URL, possibly related to rewrite rules.
CVSS Score: 5.0 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2003-0658; https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2003-0658
CVE: CVE-2003-0661
Published: 2003-10-20
Description: The NetBT Name Service (NBNS) for NetBIOS in Windows NT 4.0, 2000, XP, and Server 2003 may include random memory in a response to a NBNS query, which could allow remote attackers to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/989932; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-034; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3483
CVE: CVE-2003-0664
Published: 2003-10-20
Description: Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document.
CVSS Score: 7.5 (HIGH)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-035; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A188; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-035
CVE: CVE-2003-0665
Published: 2003-10-20
Description: Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/9668; http://www.kb.cert.org/vuls/id/992132; http://www.securityfocus.com/bid/8536
CVE: CVE-2003-0666
Published: 2003-10-20
Description: Buffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary code via modified data offset and data size parameters in a Corel WordPerfect file.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0092.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7573&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2961&w=2
CVE: CVE-2003-0686
Published: 2003-10-20
Description: Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000734; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0090&w=2; http://secunia.com/advisories/9611
CVE: CVE-2003-0688
Published: 2003-10-20
Description: The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20030803-01-P; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000727; http://www.kb.cert.org/vuls/id/993452