deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-1425
Published: 2003-12-31
Description: guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0087.html; http://www.securityfocus.com/bid/6882; https://exchange.xforce.ibmcloud.com/vulnerabilities/11356
CVE: CVE-2003-1426
Published: 2003-12-31
Description: Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPT_FILENAME environment variable to Perl's @INC include array, which allows local users to execute arbitrary code by modifying SCRIPT_FILENAME to reference a directory containing a malicious openwebmail-shared.pl executable.
CVSS Score: 3.3 (LOW)
CWE: CWE-16
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0087.html; http://www.securityfocus.com/bid/6885; https://exchange.xforce.ibmcloud.com/vulnerabilities/11357
CVE: CVE-2003-1427
Published: 2003-12-31
Description: Directory traversal vulnerability in the web configuration interface in Netgear FM114P 1.4 allows remote attackers to read arbitrary files, such as the netgear.cfg configuration file, via a hex-encoded (%2e%2e%2f) ../ (dot dot slash) in the port parameter.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/archive/1/311160; http://www.securityfocus.com/bid/6807; https://exchange.xforce.ibmcloud.com/vulnerabilities/11279
CVE: CVE-2003-1428
Published: 2003-12-31
Description: Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos.
CVSS Score: 4.8 (MEDIUM)
References: http://www.securityfocus.com/archive/1/311161; http://www.securityfocus.com/bid/6809; https://exchange.xforce.ibmcloud.com/vulnerabilities/11284
CVE: CVE-2003-1429
Published: 2003-12-31
Description: Buffer overflow in Proxomitron Naoko 4.4 allows remote attackers to execute arbitrary code via a long request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0088.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/11364; http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0088.html
CVE: CVE-2003-1430
Published: 2003-12-31
Description: Directory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote attackers to access known files via a ".." (dot dot) in an unreal:// URL.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html; http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html; http://www.securityfocus.com/bid/6775
CVE: CVE-2003-1431
Published: 2003-12-31
Description: Buffer overflow in Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (crash) via a long host string in the Unreal URL.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html; http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html; http://www.pivx.com/luigi/adv/ueng-adv.txt
CVE: CVE-2003-1432
Published: 2003-12-31
Description: Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with a negative size value, which is treated as a large positive number during memory allocation, or (2) a negative size value in a package file.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94, CWE-189
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html; http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html; http://archives.neohapsis.com/archives/bugtraq/2003-05/0142.html
CVE: CVE-2003-1433
Published: 2003-12-31
Description: Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game multiple times.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html; http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html; http://www.pivx.com/luigi/adv/ueng-adv.txt
CVE: CVE-2003-1434
Published: 2003-12-31
Description: login_ldap 3.1 and 3.2 allows remote attackers to initiate unauthenticated bind requests if (1) bind_anon_dn is on, which allows a bind with no password provided, (2) bind_anon_cred is on, which allows a bind with no DN, or (3) bind_anon is on, which allows a bind with no DN or password.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0244.html; http://www.securityfocus.com/bid/6903; https://exchange.xforce.ibmcloud.com/vulnerabilities/11374
CVE: CVE-2003-1435
Published: 2003-12-31
Description: SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary SQL commands via the days parameter to the search module.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0246.html; http://www.securityfocus.com/bid/6887; https://exchange.xforce.ibmcloud.com/vulnerabilities/11375
CVE: CVE-2003-1436
Published: 2003-12-31
Description: PHP remote file inclusion vulnerability in nukebrowser.php in Nukebrowser 2.1 to 2.5 allows remote attackers to execute arbitrary PHP code via the filhead parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/7986; http://securitytracker.com/id?1006031; http://www.securityfocus.com/bid/6731
CVE: CVE-2003-1437
Published: 2003-12-31
Description: BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access.
CVSS Score: 2.1 (LOW)
References: http://dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-25.jsp; http://www.securityfocus.com/bid/6719; https://exchange.xforce.ibmcloud.com/vulnerabilities/11220
CVE: CVE-2003-1438
Published: 2003-12-31
Description: Race condition in BEA WebLogic Server and Express 5.1 through 7.0.0.1, when using in-memory session replication or replicated stateful session beans, causes the same buffer to be provided to two users, which could allow one user to see session data that was intended for another user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-362
References: http://dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-26.01.jsp; http://www.securityfocus.com/bid/6717; http://www.securitytracker.com/id?1006018
CVE: CVE-2003-1439
Published: 2003-12-31
Description: Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-255
References: http://www.securityfocus.com/archive/1/309775; http://www.securityfocus.com/archive/1/309941/30/26090/threaded; http://www.securityfocus.com/bid/6743
CVE: CVE-2003-1440
Published: 2003-12-31
Description: SpamProbe 0.8a allows remote attackers to cause a denial of service (crash) via HTML e-mail with newline characters within an href tag, which is not properly handled by certain regular expressions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/7994; http://sourceforge.net/project/shownotes.php?release_id=137128; http://www.securityfocus.com/bid/6739
CVE: CVE-2003-1441
Published: 2003-12-31
Description: Posadis 0.50.4 through 0.50.8 allows remote attackers to cause a denial of service (crash) via a DNS message without a question section, which triggers null dereference.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/8018; http://www.osvdb.org/3522; http://www.posadis.org/advisories/pos_adv_003.txt
CVE: CVE-2003-1442
Published: 2003-12-31
Description: The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0127.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6574&w=2; http://www.securityfocus.com/bid/6824
CVE: CVE-2003-1443
Published: 2003-12-31
Description: Kaspersky Antivirus (KAV) 4.0.9.0 does not detect viruses in files with MS-DOS device names in their filenames, which allows local users to bypass virus protection, as demonstrated using aux.vbs and aux.com.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0130.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/11292; http://archives.neohapsis.com/archives/bugtraq/2003-02/0130.html
CVE: CVE-2003-1444
Published: 2003-12-31
Description: Kaspersky Antivirus (KAV) 4.0.9.0 allows local users to cause a denial of service (CPU consumption or crash) and prevent malicious code from being detected via a file with a long pathname.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0130.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/11291; http://archives.neohapsis.com/archives/bugtraq/2003-02/0130.html
CVE: CVE-2003-1445
Published: 2003-12-31
Description: Stack-based buffer overflow in Far Manager 1.70beta1 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long pathname.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-119
References: http://securityreason.com/securityalert/3281; http://www.securityfocus.com/archive/1/311334; http://www.securityfocus.com/bid/6822
CVE: CVE-2003-1446
Published: 2003-12-31
Description: Buffer overflow in the save_into_file function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a ~ (tilde).
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0260.html; http://www.securityfocus.com/bid/6912; https://exchange.xforce.ibmcloud.com/vulnerabilities/11382
CVE: CVE-2003-1447
Published: 2003-12-31
Description: IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt passwords when the configuration file is exported to XML.
CVSS Score: 1.9 (LOW)
CWE: CWE-310
References: http://securityreason.com/securityalert/3277; http://www.securityfocus.com/archive/1/310118; http://www.securityfocus.com/archive/1/310796
CVE: CVE-2003-1448
Published: 2003-12-31
Description: Memory leak in the Windows 2000 kernel allows remote attackers to cause a denial of service (SMB request hang) via a NetBIOS continuation packet.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.immunitysec.com/downloads/advantages_of_block_based_analysis.html; http://www.securityfocus.com/bid/6766; https://exchange.xforce.ibmcloud.com/vulnerabilities/11274
CVE: CVE-2003-1449
Published: 2003-12-31
Description: Aladdin Knowlege Systems eSafe Gateway 3.5.126.0 does not check the entire stream of Content Vectoring Protocol (CVP) data, which allows remote attackers to bypass virus protection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-16
References: http://archives.neohapsis.com/archives/bugtraq/2003-02/0088.html; http://www.securityfocus.com/bid/6787; https://exchange.xforce.ibmcloud.com/vulnerabilities/11295
CVE: CVE-2003-1450
Published: 2003-12-31
Description: BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service (segmentation fault) via a malformed RPL_NAMREPLY numeric 353 message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-February/003850.html; http://securityreason.com/securityalert/3279; http://www.linuxsecurity.com/content/view/104622/104/
CVE: CVE-2003-1451
Published: 2003-12-31
Description: Buffer overflow in Symantec Norton AntiVirus 2002 allows remote attackers to execute arbitrary code via an e-mail attachment with a compressed ZIP file that contains a file with a long filename.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-119
References: http://securityresponse.symantec.com/avcenter/security/Content/2003.02.28.html; http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-02/0233.html; http://www.lac.co.jp/security/english/snsadv_e/61_e.html
CVE: CVE-2003-1452
Published: 2003-12-31
Description: Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd program.
CVSS Score: 3.6 (LOW)
CWE: CWE-16
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0047.html; http://securityreason.com/securityalert/3268; http://www.securityfocus.com/archive/1/319811
CVE: CVE-2003-1453
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in the MytextSanitizer function in XOOPS 1.3.5 through 1.3.9 and XOOPS 2.0 through 2.0.1 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in an IMG tag.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/3269; http://www.securityfocus.com/archive/1/319715; http://www.securityfocus.com/bid/7434
CVE: CVE-2003-1454
Published: 2003-12-31
Description: Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie in plaintext, which could allow remote attackers to gain access.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/3276; http://www.securityfocus.com/archive/1/319747; http://www.securityfocus.com/bid/7440
CVE: CVE-2003-1455
Published: 2003-12-31
Description: Multiple buffer overflows in the launch_bcrelay function in pptpctrl.c in PoPToP 1.1.4-b1 through PoPToP 1.1.4-b3 allow local users to execute arbitrary code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://sourceforge.net/project/shownotes.php?release_id=138437; http://www.securityfocus.com/bid/7582; http://www.securityfocus.com/bid/7590
CVE: CVE-2003-1456
Published: 2003-12-31
Description: Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via unknown attack vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://perl.bobbitt.ca/yabbse/index.php?board=2%3Baction=display%3Bthreadid=720; http://securityreason.com/securityalert/3270; http://www.securityfocus.com/archive/1/319763
CVE: CVE-2003-1457
Published: 2003-12-31
Description: Auerswald COMsuite CTI ControlCenter 3.1 creates a default "runasositron" user account with an easily guessable password, which allows local users or remote attackers to gain access.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-16
References: http://securityreason.com/securityalert/3282; http://www.securityfocus.com/archive/1/319946; http://www.securityfocus.com/bid/7458
CVE: CVE-2003-1458
Published: 2003-12-31
Description: SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to execute arbitrary SQL commands via the member name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/3278; http://www.securityfocus.com/archive/1/321000; http://www.securityfocus.com/bid/7543
CVE: CVE-2003-1459
Published: 2003-12-31
Description: Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote attackers to execute arbitrary PHP code via the (1) template parameter in News.php or (2) installdir parameter in install.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://securityreason.com/securityalert/3278; http://www.securityfocus.com/archive/1/321000; http://www.securityfocus.com/bid/7542
CVE: CVE-2003-1460
Published: 2003-12-31
Description: Worker Filemanager 1.0 through 2.7 sets the permissions on the destination directory to world-readable and executable while copying data, which could allow local users to obtain sensitive information.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://www.boomerangsworld.de/worker/wchanges.php3?lang=en; http://www.securityfocus.com/bid/7460; http://www.boomerangsworld.de/worker/wchanges.php3?lang=en
CVE: CVE-2003-1461
Published: 2003-12-31
Description: Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument.  NOTE: the vendor was unable to reproduce the problem on a system that had been patched for an lp vulnerability (CVE-2002-1473).
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/3283; http://www.securityfocus.com/archive/1/320323; http://www.securityfocus.com/archive/1/320371
CVE: CVE-2003-1462
Published: 2003-12-31
Description: mod_survey 3.0.0 through 3.0.15-pre6 does not check whether a survey exists before creating a subdirectory for it, which allows remote attackers to cause a denial of service (disk consumption and possible crash).
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-05/0058.html; http://gathering.itm.mh.se/modsurvey/SA20030504.txt; http://gathering.itm.mh.se/modsurvey/changelog.php
CVE: CVE-2003-1463
Published: 2003-12-31
Description: Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1) determine the installation path by reading the contents of the Name parameter in a link, and (2) read arbitrary files via an absolute path in the Name parameter.
CVSS Score: 3.5 (LOW)
CWE: CWE-20
References: http://securityreason.com/securityalert/3286; http://www.securityfocus.com/archive/1/319735; http://www.securityfocus.com/bid/7438
CVE: CVE-2003-1464
Published: 2003-12-31
Description: Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service (disconnect and unavailable inbox) via a Short Message Service (SMS) message with a long image name.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/3287; http://www.securityfocus.com/archive/1/320555; http://www.securityfocus.com/bid/7507
CVE: CVE-2003-1465
Published: 2003-12-31
Description: Directory traversal vulnerability in download.php in Phorum 3.4 through 3.4.2 allows remote attackers to read arbitrary files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://securityreason.com/securityalert/3288; http://www.securityfocus.com/archive/1/321310; http://www.securityfocus.com/bid/7569
CVE: CVE-2003-1466
Published: 2003-12-31
Description: Unspecified vulnerability in Phorum 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to other sites via (1) register.php or (2) login.php.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/3288; http://www.securityfocus.com/archive/1/321310; http://www.securityfocus.com/bid/7581
CVE: CVE-2003-1467
Published: 2003-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (4) common.php in Phorum before 3.4.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/3288; http://www.securityfocus.com/archive/1/321310; http://www.securityfocus.com/bid/7572
CVE: CVE-2003-1468
Published: 2003-12-31
Description: The Web_Links module in PHP-Nuke 6.0 through 6.5 final allows remote attackers to obtain the full web server path via an invalid cid parameter that is non-numeric or null, which leaks the pathname in an error message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/archive/1/321313; http://www.securityfocus.com/bid/7589; https://exchange.xforce.ibmcloud.com/vulnerabilities/12436
CVE: CVE-2003-1469
Published: 2003-12-31
Description: The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://securityreason.com/securityalert/3307; http://www.nii.co.in/vuln/pdmac.html; http://www.securityfocus.com/archive/1/319867
CVE: CVE-2003-1470
Published: 2003-12-31
Description: Buffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a CREATE command with a long mailbox name.
CVSS Score: 9.0 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/3296; http://www.securityfocus.com/archive/1/319879; http://www.securityfocus.com/bid/7446
CVE: CVE-2003-1471
Published: 2003-12-31
Description: MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service (crash) via a (1) DELE or (2) UIDL with a negative number.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20
References: http://archive.cert.uni-stuttgart.de/bugtraq/2003/04/msg00364.html; http://archives.neohapsis.com/archives/bugtraq/2003-04/0359.html; http://www.securityfocus.com/bid/7445
CVE: CVE-2003-1472
Published: 2003-12-31
Description: Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long banner.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://securityreason.com/securityalert/3297; http://www.securityfocus.com/archive/1/319818; http://www.securityfocus.com/bid/7451
CVE: CVE-2003-1473
Published: 2003-12-31
Description: Buffer overflow in LTris 1.0.1 of FreeBSD Ports Collection 2003-02-25 and earlier allows local users to execute arbitrary code with gid "games" permission via a long HOME environment variable.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-119
References: http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2003-05/0122.html; http://www.securityfocus.com/archive/1/321001; http://www.securityfocus.com/bid/7537
CVE: CVE-2003-1474
Published: 2003-12-31
Description: slashem-tty in the FreeBSD Ports Collection is installed with write permissions for the games group, which allows local users with group games privileges to modify slashem-tty and execute arbitrary code as other users, as demonstrated using a separate vulnerability in LTris.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2003-05/0122.html; http://www.iss.net/security_center/static/11979.php; http://www.securityfocus.com/archive/1/321001
CVE: CVE-2003-1475
Published: 2003-12-31
Description: Netbus 1.5 through 1.7 allows more than one client to be connected at the same time, but only prompts the first connection for authentication, which allows remote attackers to gain access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://securityreason.com/securityalert/3289; http://www.securityfocus.com/archive/1/320980; http://www.securityfocus.com/bid/7538
CVE: CVE-2003-1476
Published: 2003-12-31
Description: Cerberus FTP Server 2.1 stores usernames and passwords in plaintext, which could allow local users to gain access.
CVSS Score: 2.1 (LOW)
References: http://www.cerberusftp.com/cerberus-releasenotes.htm#KnownIssues; http://www.securityfocus.com/bid/7556; http://www.cerberusftp.com/cerberus-releasenotes.htm#KnownIssues
CVE: CVE-2003-1477
Published: 2003-12-31
Description: MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) via a PowerPoint attachment that either (1) is corrupt or (2) contains "embedded objects."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.clearswift.com/download/bin/Patches/ReadMe_SMTP_438.htm; http://www.securityfocus.com/bid/7562; https://exchange.xforce.ibmcloud.com/vulnerabilities/12052
CVE: CVE-2003-1478
Published: 2003-12-31
Description: Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with a "xFFxFE" byte sequence and a large number of CRLF sequences, as demonstrated using freeze.htm.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/archive/1/320266; http://www.securityfocus.com/bid/7486; https://exchange.xforce.ibmcloud.com/vulnerabilities/11971