deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-0291
Published: 2003-06-16
Description: 3com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP responses, which allows remote attackers to identify the contents of previous HTTP requests by sniffing DHCP packets.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2516&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6951&w=2; http://nautopia.coolfreepages.com/vulnerabilidades/3com812_dhcp_leak.htm
CVE: CVE-2003-0292
Published: 2003-06-16
Description: Cross-site scripting (XSS) vulnerability in Inktomi Traffic-Server 5.5.1 allows remote attackers to insert arbitrary web script or HTML into an error page that appears to come from the domain that the client is visiting, aka "Man-in-the-Middle" XSS.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7005&w=2; http://www.securityfocus.com/bid/7596; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7005&w=2
CVE: CVE-2003-0293
Published: 2003-06-16
Description: PalmOS allows remote attackers to cause a denial of service (CPU consumption) via a flood of ICMP echo request (ping) packets.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2131&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2131&w=2
CVE: CVE-2003-0294
Published: 2003-06-16
Description: autohtml.php in php-proxima 6.0 and earlier allows remote attackers to read arbitrary files via the name parameter in a modload operation.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1549&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1549&w=2
CVE: CVE-2003-0295
Published: 2003-06-16
Description: Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capability.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7981&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2210&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7981&w=2
CVE: CVE-2003-0296
Published: 2003-06-16
Description: The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4163&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4163&w=2
CVE: CVE-2003-0297
Published: 2003-06-16
Description: c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4163&w=2; http://www.redhat.com/support/errata/RHSA-2005-015.html; http://www.redhat.com/support/errata/RHSA-2005-114.html
CVE: CVE-2003-0298
Published: 2003-06-16
Description: The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large (1) literal and possibly (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4163&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4163&w=2
CVE: CVE-2003-0299
Published: 2003-06-16
Description: The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large mailbox size values that cause either integer signedness errors or integer overflow errors.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4163&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4163&w=2
CVE: CVE-2003-0300
Published: 2003-06-16
Description: The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4163&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4163&w=2
CVE: CVE-2003-0301
Published: 2003-06-16
Description: The IMAP Client for Outlook Express 6.00.2800.1106 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4163&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4163&w=2
CVE: CVE-2003-0302
Published: 2003-06-16
Description: The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4163&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4163&w=2
CVE: CVE-2003-0310
Published: 2003-06-16
Description: Cross-site scripting (XSS) vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6680&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6680&w=2
CVE: CVE-2003-0312
Published: 2003-06-16
Description: Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8173&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8173&w=2
CVE: CVE-2003-0313
Published: 2003-06-16
Description: Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to list arbitrary directory contents via a ... (triple dot) in an HTTP request.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8173&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8173&w=2
CVE: CVE-2003-0314
Published: 2003-06-16
Description: Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) via a URL that ends in a "</" sequence.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8173&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8173&w=2
CVE: CVE-2003-0315
Published: 2003-06-16
Description: Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP request, which may trigger a buffer overflow.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8173&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8173&w=2
CVE: CVE-2003-0316
Published: 2003-06-16
Description: Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for various protocols, including an open relay for SMTP, which allows it to be abused by spammers.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-05/0188.html; http://www.venturiwireless.com/tech_support/Q_and_A/Q_A_09.htm; http://archives.neohapsis.com/archives/bugtraq/2003-05/0188.html
CVE: CVE-2003-0344
Published: 2003-06-16
Description: Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006401.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9135&w=2; http://secunia.com/advisories/8943
CVE: CVE-2003-0354
Published: 2003-06-16
Description: Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9172&w=2; http://www.mandriva.com/security/advisories?name=MDKSA-2003:065; http://www.redhat.com/support/errata/RHSA-2003-181.html
CVE: CVE-2003-0364
Published: 2003-06-16
Description: The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions.
CVSS Score: 5.0 (MEDIUM)
References: http://www.debian.org/security/2003/dsa-311; http://www.debian.org/security/2003/dsa-312; http://www.debian.org/security/2003/dsa-332
CVE: CVE-2003-0365
Published: 2003-06-16
Description: ICQLite 2003a creates the ICQ Lite directory with an ACE for "Full Control" privileges for Interactive Users, which allows local users to gain privileges as other users by replacing the executables with malicious programs.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5027&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5027&w=2
CVE: CVE-2003-0370
Published: 2003-06-16
Description: Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-May/004983.html; http://www.debian.org/security/2003/dsa-361; http://www.kde.org/info/security/advisory-20030602-1.txt
CVE: CVE-2003-0371
Published: 2003-06-16
Description: Buffer overflow in Prishtina FTP client 1.x allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP banner.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9044&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9044&w=2
CVE: CVE-2003-0372
Published: 2003-06-16
Description: Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code by causing a negative argument to be provided to the insstr function as used in a NASL script.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-189
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3427&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4849&w=2; http://www.securityfocus.com/bid/7664
CVE: CVE-2003-0373
Published: 2003-06-16
Description: Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code via (1) a long proto argument to the scanner_add_port function, (2) a long user argument to the ftp_log_in function, (3) a long pass argument to the ftp_log_in function.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3427&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4849&w=2; http://www.securityfocus.com/bid/7664
CVE: CVE-2003-0374
Published: 2003-06-16
Description: Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, a different set of vulnerabilities than those identified by CVE-2003-0372 and CVE-2003-0373, aka "similar issues in other nasl functions as well as in libnessus."
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3427&w=2; http://www.securityfocus.com/bid/7664; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3427&w=2
CVE: CVE-2003-0375
Published: 2003-06-16
Description: Cross-site scripting (XSS) vulnerability in member.php of XMBforum XMB 1.8.x (aka Partagium) allows remote attackers to insert arbitrary HTML and web script via the "member" parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://forums.xmbforum.com/viewthread.php?tid=773046; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2228&w=2; http://www.securityfocus.com/bid/7662
CVE: CVE-2003-0376
Published: 2003-06-16
Description: Buffer overflow in Eudora 5.2.1 allows remote attackers to cause a denial of service (crash and failed restart) and possibly execute arbitrary code via an Attachment Converted argument with a large number of . (dot) characters.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9452&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9452&w=2
CVE: CVE-2003-0377
Published: 2003-06-16
Description: SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versions, allows remote attackers to insert arbitrary SQL and execute code via certain variables, as demonstrated using the GroupName variable in SiteAdmin.ASP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8225&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8225&w=2
CVE: CVE-2003-0378
Published: 2003-06-16
Description: The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set.
CVSS Score: 7.5 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=107579; http://www.kb.cert.org/vuls/id/467828; http://docs.info.apple.com/article.html?artnum=107579
CVE: CVE-2003-1086
Published: 2003-06-17
Description: PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote attackers to execute arbitrary PHP code by modifying the pm_path parameter to reference a URL on a remote web server that contains the code.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5498&w=2; http://www.pmachine.com/forum/threads.php?id=7274_0_13_0_C; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5498&w=2
CVE: CVE-2003-1067
Published: 2003-06-19
Description: Multiple buffer overflows in the (1) dbm_open function, as used in ndbm and dbm, and the (2) dbminit function in Solaris 2.6 through 9 allow local users to gain root privileges via long arguments to Xsun or other programs that use these functions.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/9088/; http://sunsolve.sun.com/search/document.do?assetkey=1-26-55420-1; http://www.ciac.org/ciac/bulletins/n-108.shtml
CVE: CVE-2003-0400
Published: 2003-06-30
Description: Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to return unauthorized portions of memory, as demonstrated using the "-->" string in a CookieName argument to the login template, referred to as a "memory leak" in some reports.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6857&w=2; http://www.iss.net/security_center/static/12075.php; http://www.s21sec.com/es/avisos/s21sec-018-en.txt
CVE: CVE-2003-0401
Published: 2003-06-30
Description: Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn/style template.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4661&w=2; http://www.iss.net/security_center/static/12074.php; http://www.s21sec.com/es/avisos/s21sec-019-en.txt
CVE: CVE-2003-0402
Published: 2003-06-30
Description: The default login template (/vgn/login) in Vignette StoryServer 5 and Vignette V/5 generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5755&w=2; http://www.iss.net/security_center/static/12073.php; http://www.s21sec.com/en/avisos/s21sec-020-en.txt
CVE: CVE-2003-0403
Published: 2003-06-30
Description: Vignette StoryServer 5 and Vignette V/5 allows remote attackers to read and modify license information, and cause a denial of service (service halt) by directly accessing the /vgn/license template.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4612&w=2; http://www.iss.net/security_center/static/12072.php; http://www.s21sec.com/es/avisos/s21sec-021-en.txt
CVE: CVE-2003-0404
Published: 2003-06-30
Description: Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7360&w=2; http://www.iss.net/security_center/static/12071.php; http://www.s21sec.com/es/avisos/s21sec-023-en.txt
CVE: CVE-2003-0405
Published: 2003-06-30
Description: Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or cookie which is processed in the NEEDS command, or (2) an HTTP Referrer that is processed in the VALID_PATHS command.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6197&w=2; http://www.iss.net/security_center/static/12070.php; http://www.s21sec.com/es/avisos/s21sec-024-en.txt
CVE: CVE-2003-0406
Published: 2003-06-30
Description: PalmVNC 1.40 and earlier stores passwords in plaintext in the PalmVNCDB, which is backed up to PCs that the Palm is synchronized with, which could allow attackers to gain privileges.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3389&w=2; http://www.iss.net/security_center/static/12083.php; http://www.securityfocus.com/bid/7696
CVE: CVE-2003-0407
Published: 2003-06-30
Description: Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3102&w=2; http://www.iss.net/security_center/static/12087.php; http://www.securityfocus.com/bid/7699
CVE: CVE-2003-0408
Published: 2003-06-30
Description: Buffer overflow in Uptime Client (UpClient) 5.0b7, and possibly other versions, allows local users to gain privileges via a long -p argument.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2652&w=2; http://www.iss.net/security_center/static/12131.php; http://www.securityfocus.com/bid/7703
CVE: CVE-2003-0409
Published: 2003-06-30
Description: Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP (1) POST or (2) HEAD request.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5160&w=2; http://www.iss.net/security_center/static/12107.php; http://www.securityfocus.com/bid/7695
CVE: CVE-2003-0410
Published: 2003-06-30
Description: Buffer overflow in AnalogX Proxy 4.13 allows remote attackers to execute arbitrary code via a long URL to port 6588.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0082.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3978&w=2; http://www.analogx.com/contents/download/network/proxy.htm
CVE: CVE-2003-0411
Published: 2003-06-30
Description: Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.
CVSS Score: 7.5 (HIGH)
CWE: CWE-178
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9475&w=2; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity; http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1
CVE: CVE-2003-0412
Published: 2003-06-30
Description: Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could allow remote attackers to hide malicious activities.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9475&w=2; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity; http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1
CVE: CVE-2003-0413
Published: 2003-06-30
Description: Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0 for Windows 2000/XP or (2) Sun Java System Web Server 6.1 allows remote attackers to insert arbitrary web script or HTML via an HTTP request that generates an "Invalid JSP file" error, which inserts the text in the resulting error message.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9475&w=2; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57605
CVE: CVE-2003-0414
Published: 2003-06-30
Description: The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, which allows local users to gain privileges by reading a plaintext password in the statefile.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9475&w=2; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity; http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1
CVE: CVE-2003-0415
Published: 2003-06-30
Description: Remote PC Access Server 2.2 allows remote attackers to cause a denial of service (crash) by receiving packets from the server and sending them back to the server.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1698&w=2; http://www.securityfocus.com/bid/7698; http://www.ytech.co.il/advisories/rpca/rpcaccess.htm
CVE: CVE-2003-0416
Published: 2003-06-30
Description: Cross-site scripting (XSS) vulnerability in index.cgi for Bandmin 1.4 allows remote attackers to insert arbitrary HTML or script via (1) the year parameter in a showmonth action, (2) the month parameter in a showmonth action, or (3) the host parameter in a showhost action.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2771&w=2; http://www.iss.net/security_center/static/12108.php; http://www.securityfocus.com/bid/7729
CVE: CVE-2003-0417
Published: 2003-06-30
Description: Directory traversal vulnerability in Son hServer 0.2 allows remote attackers to read arbitrary files via ".|." (modified dot-dot) sequences.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1685&w=2; http://www.iss.net/security_center/static/12103.php; http://www.securityfocus.com/bid/7717
CVE: CVE-2003-0367
Published: 2003-07-02
Description: znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://www.debian.org/security/2003/dsa-308; http://www.mandriva.com/security/advisories?name=MDKSA-2003:068; http://www.openpkg.org/security/OpenPKG-SA-2003.031-gzip.html
CVE: CVE-2003-0380
Published: 2003-07-02
Description: Buffer overflow in atftp daemon (atftpd) 0.6.1 and earlier, and possibly later versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2003-06/0056.html; http://www.debian.org/security/2003/dsa-314; http://www.securityfocus.com/archive/82/323886/2003-06-02/2003-06-08/0
CVE: CVE-2003-0382
Published: 2003-07-02
Description: Buffer overflow in Eterm 0.9.2 allows local users to gain privileges via a long ETERMPATH environment variable.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6001&w=2; http://www.debian.org/security/2003/dsa-309; http://www.securityfocus.com/bid/7708
CVE: CVE-2003-0385
Published: 2003-07-02
Description: Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5197&w=2; http://www.debian.org/security/2003/dsa-310; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5197&w=2