deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-0473
Published: 2003-08-07
Description: Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications.
CVSS Score: 10.0 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20030607-01-P; http://www.osvdb.org/8586; http://www.securityfocus.com/bid/8029
CVE: CVE-2003-0474
Published: 2003-08-07
Description: Directory traversal vulnerability in iWeb Server allows remote attackers to read arbitrary files via an HTTP request containing .. sequences, a different vulnerability than CVE-2003-0475.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1319&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6636&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1319&w=2
CVE: CVE-2003-0475
Published: 2003-08-07
Description: Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request containing URL-encoded .. sequences ("%5c%2e%2e"), a different vulnerability than CVE-2003-0474.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3769&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6636&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3769&w=2
CVE: CVE-2003-0476
Published: 2003-08-07
Description: The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4009&w=2; http://www.debian.org/security/2004/dsa-358; http://www.debian.org/security/2004/dsa-423
CVE: CVE-2003-0477
Published: 2003-08-07
Description: wzdftpd 0.1rc4 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command without an argument.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5302&w=2; http://www.wzdftpd.net/changea.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5302&w=2
CVE: CVE-2003-0478
Published: 2003-08-07
Description: Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) methane 0.1.1, (4) AndromedeIRCd 1.2.3-Release, and (5) ircd-RU, when running in debug mode, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request containing format strings.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4723&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5906&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6823&w=2
CVE: CVE-2003-0479
Published: 2003-08-07
Description: Cross-site scripting (XSS) vulnerability in the guestbook for WebBBS allows remote attackers to insert arbitrary web script via the (1) Name, (2) Email, or (3) Message fields.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5230&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5230&w=2
CVE: CVE-2003-0480
Published: 2003-08-07
Description: VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipulation."
CVSS Score: 3.7 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9147&w=2; http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=1019; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9147&w=2
CVE: CVE-2003-0481
Published: 2003-08-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated using the msg parameter to file_select.php.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9781&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9781&w=2
CVE: CVE-2003-0482
Published: 2003-08-07
Description: TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly accessing the uploaded code via a request to the repository containing the code.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9781&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9781&w=2
CVE: CVE-2003-0483
Published: 2003-08-07
Description: Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via (1) the member parameter to member.php or (2) the action parameter to buddy.php.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9307&w=2; https://docs.xmbforum2.com/index.php?title=Security_Issue_History; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9307&w=2
CVE: CVE-2003-0484
Published: 2003-08-07
Description: Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the topic_id parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2514&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2514&w=2
CVE: CVE-2003-0485
Published: 2003-08-07
Description: Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, invalid data type.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7155&w=2; http://www.securityfocus.com/bid/7997; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7155&w=2
CVE: CVE-2003-0486
Published: 2003-08-07
Description: SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0644&w=2; http://www.phpbb.com/phpBB/viewtopic.php?t=112052; http://www.securityfocus.com/bid/7979
CVE: CVE-2003-0487
Published: 2003-08-07
Description: Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parameter in the do_subscribe module, (2) a long folder parameter in the add_acl module, (3) a long folder parameter in the list module, and (4) a long user parameter in the do_map module.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3760&w=2; http://nautopia.org/vulnerabilidades/kerio_mailserver.htm; http://www.securityfocus.com/bid/7967
CVE: CVE-2003-0488
Published: 2003-08-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1) the add_name parameter in the add_acl module, or (2) the alias parameter in the do_map module.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3760&w=2; http://nautopia.org/vulnerabilidades/kerio_mailserver.htm; http://www.securityfocus.com/bid/7966
CVE: CVE-2003-0489
Published: 2003-08-07
Description: tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute.
CVSS Score: 7.2 (HIGH)
References: http://www.debian.org/security/2003/dsa-330; http://www.debian.org/security/2003/dsa-330
CVE: CVE-2003-0490
Published: 2003-08-07
Description: The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical directories and files with world-writable permissions, which allows local users to gain privileges as other users by replacing programs with malicious code.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6992&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6992&w=2
CVE: CVE-2003-0491
Published: 2003-08-07
Description: The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=vuln-dev&m=[PII_REDACTED]6147&w=2; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]6147&w=2; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]6147&w=2
CVE: CVE-2003-0492
Published: 2003-08-07
Description: Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web script via the Search parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2128&w=2; http://www.securityfocus.com/bid/7922; https://exchange.xforce.ibmcloud.com/vulnerabilities/12325
CVE: CVE-2003-0493
Published: 2003-08-07
Description: Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after obtaining a valid session ID.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2128&w=2; http://www.securityfocus.com/bid/7924; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2128&w=2
CVE: CVE-2003-0494
Published: 2003-08-07
Description: password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modified member id.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2128&w=2; http://www.securityfocus.com/bid/7925; https://exchange.xforce.ibmcloud.com/vulnerabilities/12326
CVE: CVE-2003-0495
Published: 2003-08-07
Description: Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2212&w=2; http://www.securityfocus.com/bid/7920; https://exchange.xforce.ibmcloud.com/vulnerabilities/12304
CVE: CVE-2003-0497
Published: 2003-08-07
Description: Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=7; https://www.intersystems.com/support-learning/support/product-news-alerts/support-alerts-2003/; http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=7
CVE: CVE-2003-0498
Published: 2003-08-07
Description: Caché Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows local users to execute arbitrary code by adding server-side scripts that are executed with root privileges.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=7; https://www.intersystems.com/support-learning/support/product-news-alerts/support-alerts-2003/; http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=7
CVE: CVE-2003-0499
Published: 2003-08-07
Description: Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations.
CVSS Score: 3.6 (LOW)
References: https://www.debian.org/security/2003/dsa-335; https://www.debian.org/security/2003/dsa-335
CVE: CVE-2003-0500
Published: 2003-08-07
Description: SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005826.html; http://www.debian.org/security/2003/dsa-338; http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005826.html
CVE: CVE-2003-0501
Published: 2003-08-07
Description: The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4242; http://www.debian.org/security/2004/dsa-358; http://www.debian.org/security/2004/dsa-423
CVE: CVE-2003-0503
Published: 2003-08-07
Description: Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service or execute arbitrary code via a long third argument.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3575&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]2772&w=2; http://www.lac.co.jp/security/intelligence/SNSAdvisory/65.html
CVE: CVE-2003-0504
Published: 2003-08-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware 0.9.14.003 (aka webdistro) allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to index.php in the addressbook module.
CVSS Score: 4.3 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000697; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7981&w=2; http://www.debian.org/security/2003/dsa-365
CVE: CVE-2003-0505
Published: 2003-08-07
Description: Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (dot dot) sequences in a file transfer request.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1546&w=2; http://www.securityfocus.com/bid/7931; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1546&w=2
CVE: CVE-2003-0506
Published: 2003-08-07
Description: Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malformed packets, as demonstrated via the chat conversation.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1546&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1546&w=2
CVE: CVE-2003-0507
Published: 2003-08-07
Description: Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service (reboot) and possibly execute arbitrary code via an LDAP version 3 search request with a large number of (1) "AND," (2) "OR," and possibly other statements, which causes LSASS.EXE to crash.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1775&w=2; http://secunia.com/advisories/9171; http://support.microsoft.com/default.aspx?kbid=319709
CVE: CVE-2003-0508
Published: 2003-08-07
Description: Buffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader (acroread) 5.0.7 and earlier allows remote attackers to execute arbitrary code via a .pdf file with a long mailto link.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2583&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1291&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2583&w=2
CVE: CVE-2003-0509
Published: 2003-08-07
Description: SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1395&w=2; http://secunia.com/advisories/9165; http://securitytracker.com/id?1007092
CVE: CVE-2003-0510
Published: 2003-08-07
Description: Format string vulnerability in ezbounce 1.0 through 1.50 allows remote attackers to execute arbitrary code via the "sessions" command.
CVSS Score: 7.5 (HIGH)
References: http://druglord.freelsd.org/ezbounce/; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0281&w=2; http://druglord.freelsd.org/ezbounce/
CVE: CVE-2003-1088
Published: 2003-08-11
Description: Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML via the method parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5536&w=2; http://secunia.com/advisories/9497; http://securitytracker.com/id?1013365
CVE: CVE-1999-1263
Published: 2003-08-15
Description: Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the file to be modified, which is processed by uuencode in Metamail scripts such as sun-audio-file.
CVSS Score: 2.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4657&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/1677; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4657&w=2
CVE: CVE-2001-1410
Published: 2003-08-18
Description: Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7274&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1769&w=2; http://www.doxdesk.com/personal/posts/bugtraq/20030713-ie/
CVE: CVE-2003-0142
Published: 2003-08-18
Description: Adobe Acrobat Reader (acroread) 6, under certain circumstances when running with the "Certified plug-ins only" option disabled, loads plug-ins with signatures used for older versions of Acrobat, which can allow attackers to cause Acrobat to enter Certified mode and run untrusted plugins by modifying the CTIsCertifiedMode function.
CVSS Score: 5.0 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/689835; http://www.securityfocus.com/archive/1/328224; http://www.kb.cert.org/vuls/id/689835
CVE: CVE-2003-0176
Published: 2003-08-18
Description: The Name Service Daemon (nsd), when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via a UDP port scan.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20030701-01-P; ftp://patches.sgi.com/support/free/security/advisories/20030701-01-P
CVE: CVE-2003-0177
Published: 2003-08-18
Description: SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause subsequent group membership entries to be processed inadvertently.
CVSS Score: 4.6 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20030701-01-P; ftp://patches.sgi.com/support/free/security/advisories/20030701-01-P
CVE: CVE-2003-0192
Published: 2003-08-18
Description: Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache to use the weak ciphersuite.
CVSS Score: 6.4 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.6/SCOSA-2004.6.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2600&w=2; http://www.mandriva.com/security/advisories?name=MDKSA-2003:075
CVE: CVE-2003-0252
Published: 2003-08-18
Description: Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-193
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0023.html; http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0024.html; http://isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txt
CVE: CVE-2003-0253
Published: 2003-08-18
Description: The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a denial of service.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2600&w=2; http://www.mandriva.com/security/advisories?name=MDKSA-2003:075; http://www.redhat.com/support/errata/RHSA-2003-240.html
CVE: CVE-2003-0254
Published: 2003-08-18
Description: Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service (CPU consumption by infinite loop) when the FTP proxy server fails to create an IPv6 socket.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2600&w=2; http://www.mandriva.com/security/advisories?name=MDKSA-2003:075; http://www.redhat.com/support/errata/RHSA-2003-240.html
CVE: CVE-2003-0345
Published: 2003-08-18
Description: Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB packet that specifies a smaller buffer length than is required.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/9225; http://securitytracker.com/id?1007154; http://www.kb.cert.org/vuls/id/337764
CVE: CVE-2003-0350
Published: 2003-08-18
Description: The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 (ListView) does not properly handle Windows messages, which allows local users to execute arbitrary code via a "Shatter" style message to the Utility Manager that references a user-controlled callback function.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0015.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5939&w=2; http://www.ngssoftware.com/advisories/utilitymanager.txt
CVE: CVE-2003-0352
Published: 2003-08-18
Description: Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007079.html; http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007357.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1618&w=2
CVE: CVE-2003-0440
Published: 2003-08-18
Description: The (1) semi MIME library 1.14.5 and earlier, and (2) wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS Score: 4.6 (MEDIUM)
References: http://www.debian.org/security/2003/dsa-339; http://www.redhat.com/support/errata/RHSA-2003-231.html; http://www.redhat.com/support/errata/RHSA-2003-234.html
CVE: CVE-2003-0456
Published: 2003-08-18
Description: VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folder that does not exist, which leaks the pathname in an error message, as demonstrated using _vti_bin/fpcount.exe.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0002.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3737&w=2; http://www.krusesecurity.dk/advisories/vis0103.txt
CVE: CVE-2003-0458
Published: 2003-08-18
Description: Unknown vulnerability in HP NonStop Server D40.00 through D48.03, and G01.00 through G06.20, allows local users to gain additional privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://www.securityfocus.com/advisories/5545; http://www.securityfocus.com/bid/8080; http://www.securityfocus.com/advisories/5545
CVE: CVE-2003-0465
Published: 2003-08-18
Description: The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=linux-kernel&m=[PII_REDACTED]0436&w=2; http://marc.info/?l=linux-kernel&m=[PII_REDACTED]3490&w=2; http://www.redhat.com/support/errata/RHSA-2004-188.html