deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-1003
Published: 2004-01-05
Description: Cisco PIX firewall 5.x.x, and 6.3.1 and earlier, allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is set.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.cisco.com/warp/public/707/cisco-sa-20031215-pix.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20031215-pix.shtml
CVE: CVE-2003-1004
Published: 2004-01-05
Description: Cisco PIX firewall 6.2.x through 6.2.3, when configured as a VPN Client, allows remote attackers to cause a denial of service (dropped IPSec tunnel connection) via an IKE Phase I negotiation request to the outside interface of the firewall.
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/cisco-sa-20031215-pix.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20031215-pix.shtml
CVE: CVE-2003-1012
Published: 2004-01-05
Description: The SMB dissector in Ethereal before 0.10.0 allows remote attackers to cause a denial of service via a malformed SMB packet that triggers a segmentation fault during processing of Selected packets.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc; ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000801
CVE: CVE-2003-1013
Published: 2004-01-05
Description: The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q.931, which triggers a null dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc; ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000801
CVE: CVE-2003-1017
Published: 2004-01-05
Description: Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.
CVSS Score: 5.0 (MEDIUM)
References: http://www.macromedia.com/devnet/security/security_zone/mpsb03-08.html; http://www.securityfocus.com/bid/8900; https://exchange.xforce.ibmcloud.com/vulnerabilities/14013
CVE: CVE-2003-1020
Published: 2004-01-05
Description: The format_send_to_gui function in formats.c for irssi before 0.8.9 allows remote IRC users to cause a denial of service (crash).
CVSS Score: 5.0 (MEDIUM)
References: http://www.mandriva.com/security/advisories?name=MDKSA-2003:117; http://www.securityfocus.com/archive/1/347218; https://exchange.xforce.ibmcloud.com/vulnerabilities/13973
CVE: CVE-2004-1000
Published: 2004-01-10
Description: lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/13771; http://www.debian.org/security/2004/dsa-630; https://exchange.xforce.ibmcloud.com/vulnerabilities/18808
CVE: CVE-2004-1124
Published: 2004-01-14
Description: Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized activities.
CVSS Score: 4.6 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.22/SCOSA-2005.22.txt; ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.2/SCOSA-2005.2.txt; http://secunia.com/advisories/13915
CVE: CVE-2004-1764
Published: 2004-01-14
Description: Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors.
CVSS Score: 7.2 (HIGH)
References: http://www.ciac.org/ciac/bulletins/o-057.shtml; http://www.kb.cert.org/vuls/id/406406; http://www.securityfocus.com/advisories/6237
CVE: CVE-2005-1247
Published: 2004-01-15
Description: webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0021.html; http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097379.htm; http://www.cirt.dk/advisories/cirt-31-advisory.pdf
CVE: CVE-2003-0696
Published: 2004-01-20
Description: The getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows attackers to cause a denial of service (resource exhaustion).
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/8738; https://exchange.xforce.ibmcloud.com/vulnerabilities/13328; https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=7&heading=AIX51&topic=SECURITY&month=200310&label=getipnodebyname%28%29+API+does+not+close+sockets.&date=20031001&bulletin=datafile150755&embed=true
CVE: CVE-2003-0904
Published: 2004-01-20
Description: Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/10615; http://www.kb.cert.org/vuls/id/530660; http://www.microsoft.com/exchange/support/e2k3owa.asp
CVE: CVE-2003-0969
Published: 2004-01-20
Description: mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
CVSS Score: 7.5 (HIGH)
References: http://www.debian.org/security/2004/dsa-411; http://www.novell.com/linux/security/advisories/2004_02_tcpdump.html; http://www.osvdb.org/3331
CVE: CVE-2003-0985
Published: 2004-01-20
Description: The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077.
CVSS Score: 7.2 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040102-01-U; http://archives.neohapsis.com/archives/bugtraq/2004-01/0070.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000799
CVE: CVE-2003-0990
Published: 2004-01-20
Description: The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the "To:" field.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4180&w=2; http://www.bugtraq.org/advisories/_BSSADV-0001.txt; http://www.securityfocus.com/archive/1/348366
CVE: CVE-2003-1022
Published: 2004-01-20
Description: Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory.
CVSS Score: 7.5 (HIGH)
References: http://www.ciac.org/ciac/bulletins/o-048.shtml; http://www.debian.org/security/2004/dsa-416; http://www.osvdb.org/3346
CVE: CVE-2003-1023
Published: 2004-01-20
Description: Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-014.0.txt; ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc; ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc
CVE: CVE-2003-1024
Published: 2004-01-20
Description: Unknown vulnerability in the ls-F builtin function in tcsh on Solaris 8 allows local users to create or delete files as other users, and gain privileges.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/10486; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57455; http://www.kb.cert.org/vuls/id/281356
CVE: CVE-2003-1025
Published: 2004-01-20
Description: Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.kb.cert.org/vuls/id/652278; http://www.securityfocus.com/archive/1/346948; http://www.us-cert.gov/cas/techalerts/TA04-033A.html
CVE: CVE-2003-1026
Published: 2004-01-20
Description: Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the "Travel Log Cross Domain Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7578&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5587&w=2; http://www.kb.cert.org/vuls/id/784102
CVE: CVE-2003-1027
Published: 2004-01-20
Description: Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9446&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5587&w=2; http://www.kb.cert.org/vuls/id/413886
CVE: CVE-2003-1028
Published: 2004-01-20
Description: The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an invalid ContentType and a .htm file, which could allow remote attackers to bypass security mechanisms that rely on random names, as demonstrated by threadid10008.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8705&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1665&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5587&w=2
CVE: CVE-2004-0011
Published: 2004-01-20
Description: Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://www.ciac.org/ciac/bulletins/o-048.shtml; http://www.debian.org/security/2004/dsa-416; http://www.securityfocus.com/bid/9377
CVE: CVE-2004-0014
Published: 2004-01-20
Description: Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/10549; http://secunia.com/advisories/10550; http://www.debian.org/security/2004/dsa-412
CVE: CVE-2004-0029
Published: 2004-01-20
Description: Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0308&w=2; http://secunia.com/advisories/10566; http://www.excluded.org/advisories/advisory05.txt
CVE: CVE-2004-0030
Published: 2004-01-20
Description: PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains the code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-829
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9453&w=2; http://secunia.com/advisories/10565; http://www.osvdb.org/3343
CVE: CVE-2004-0031
Published: 2004-01-20
Description: PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9453&w=2; http://secunia.com/advisories/10565; http://www.osvdb.org/3403
CVE: CVE-2004-0032
Published: 2004-01-20
Description: Cross-site scripting (XSS) vulnerability in search.php in PHPGEDVIEW 2.61 allows remote attackers to inject arbitrary HTML and web script via the firstname parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9453&w=2; http://secunia.com/advisories/10565; http://www.osvdb.org/3402
CVE: CVE-2004-0033
Published: 2004-01-20
Description: admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a phpinfo command.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9453&w=2; http://secunia.com/advisories/10565; http://www.osvdb.org/3404
CVE: CVE-2004-0034
Published: 2004-01-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.4.5 and earlier allow remote attackers to inject arbitrary HTML or web script via (1) the phorum_check_xss function in common.php, (2) the EditError variable in profile.php, and (3) the Error variable in login.php.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4110&w=2; http://phorum.org/; http://secunia.com/advisories/10567
CVE: CVE-2004-0035
Published: 2004-01-20
Description: SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hide_email parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4110&w=2; http://secunia.com/advisories/10567; http://www.osvdb.org/3508
CVE: CVE-2004-0036
Published: 2004-01-20
Description: SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2123&w=2; http://www.osvdb.org/3344; http://www.securityfocus.com/bid/9360
CVE: CVE-2004-0037
Published: 2004-01-20
Description: FirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF messages.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1167&w=2; http://secunia.com/advisories/10556; http://www.osvdb.org/3442
CVE: CVE-2004-1766
Published: 2004-01-20
Description: The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices running ScreenOS 5.0, which allows remote attackers to obtain sensitive information via sniffing.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/10675; http://www.juniper.net/support/security/alerts/58290.txt; http://www.kb.cert.org/vuls/id/927630
CVE: CVE-2004-2127
Published: 2004-01-20
Description: Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file variable.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7602&w=2; http://secunia.com/advisories/10740; http://www.osvdb.org/3739
CVE: CVE-2004-1759
Published: 2004-01-21
Description: Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated using port scanning.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/10696; http://www.ciac.org/ciac/bulletins/o-066.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml
CVE: CVE-2004-1760
Published: 2004-01-21
Description: The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/10696; http://www.ciac.org/ciac/bulletins/o-066.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml
CVE: CVE-2004-2120
Published: 2004-01-23
Description: Reptile Web Server allows remote attackers to cause a denial of service (CPU consumption) via multiple incomplete GET requests without the HTTP version.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3434&w=2; http://securitytracker.com/id?1008842; http://www.autistici.org/fdonato/advisory/reptilewsDailyVersion-adv.txt
CVE: CVE-2004-2117
Published: 2004-01-24
Description: Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via malformed HTTP requests such as (1) a GET request without the HTTP version (HTTP/1.1), or (2) a request without GET or the HTTP version.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6730&w=2; http://secunia.com/advisories/10707; http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt
CVE: CVE-2004-2122
Published: 2004-01-24
Description: Cross-site scripting (XSS) vulnerability in intraforum_db.cgi in Intra Forum allows remote attackers to inject arbitrary web script or HTML via the (1) use_last_read or (2) forum parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7071&w=2; http://www.securitytracker.com/id?1008839; https://exchange.xforce.ibmcloud.com/vulnerabilities/14933
CVE: CVE-2004-2131
Published: 2004-01-27
Description: Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4074&w=2; http://secunia.com/advisories/10737/; http://www-1.ibm.com/support/docview.wss?uid=swg21153336
CVE: CVE-2004-2134
Published: 2004-01-28
Description: Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5112&w=2; http://www.planet-source-code.com/vb/scripts/ShowCode.asp?txtCodeId=803&lngWId=5; http://www.securityfocus.com/archive/1/352315/30/21430/threaded
CVE: CVE-2004-2034
Published: 2004-01-29
Description: Buffer overflow in the (1) WTHoster and (2) WebDriver modules in WildTangent Web Driver 4.0 allows remote attackers to execute arbitrary code via a long filename.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7149&w=2; http://secunia.com/advisories/11727; http://www.ngssoftware.com/advisories/wildtangent.txt
CVE: CVE-2004-2132
Published: 2004-01-29
Description: Directory traversal vulnerability in PJreview_Neo.cgi in PJ CGI Neo review allows remote attackers to read arbitrary files via a ..  (dot dot) in the p parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2913&w=2; http://www.osvdb.org/3746; http://www.secunia.com/advisories/10734/
CVE: CVE-2004-2133
Published: 2004-01-29
Description: Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by causing cvsup to link against malicious libraries that are created in world-writable directories such as /usr/src/packages.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0025.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2450&w=2; http://www.securityfocus.com/bid/9523
CVE: CVE-2003-1207
Published: 2004-02-01
Description: Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service (crash) via a dir command with a large number of "." characters followed by a "/*" string.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/10778; http://securitytracker.com/id?1008908; http://www.securityfocus.com/archive/1/352329
CVE: CVE-2002-0034
Published: 2004-02-03
Description: The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when converting a FAT32 file system, which could cause the conversion to produce a file system with less secure permissions than expected.
CVSS Score: 4.6 (MEDIUM)
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B237399; http://www.kb.cert.org/vuls/id/361065; http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B237399
CVE: CVE-2002-0712
Published: 2004-02-03
Description: Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user, which could allow a master user to perform operations that require multiple authorizations.
CVSS Score: 2.1 (LOW)
References: http://www.kb.cert.org/vuls/id/720017; http://www.kb.cert.org/vuls/id/AAMN-5KKVXC; http://www.securityfocus.com/bid/7284
CVE: CVE-2003-0119
Published: 2004-02-03
Description: The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attackers to directly connect to the daemon and conduct unauthorized activities.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/8221; http://www-1.ibm.com/services/continuity/recover1.nsf/4699c03b46f2d4f68525678c006d45ae/85256a3400529a8685256cde0008ddde?OpenDocument; http://www.kb.cert.org/vuls/id/624713
CVE: CVE-2003-0175
Published: 2004-02-03
Description: SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWATCH ioctl.
CVSS Score: 2.1 (LOW)
References: ftp://patches.sgi.com/support/free/security/advisories/20030603-01-P; http://www.kb.cert.org/vuls/id/142228; http://www.securityfocus.com/bid/7868
CVE: CVE-2003-0368
Published: 2004-02-03
Description: Nokia Gateway GPRS support node (GGSN) allows remote attackers to cause a denial of service (kernel panic) via a malformed IP packet with a 0xFF TCP option.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.atstake.com/research/advisories/2003/a060903-1.txt; http://www.kb.cert.org/vuls/id/924812; http://www.securityfocus.com/bid/7854
CVE: CVE-2003-0814
Published: 2004-02-03
Description: Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/10192; http://securitytracker.com/id?1007687; http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0177.html
CVE: CVE-2003-0815
Published: 2004-02-03
Description: Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9047&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4656&w=2; http://secunia.com/advisories/10192