deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-0624
Published: 2003-12-01
Description: Cross-site scripting (XSS) vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier allows remote attackers to inject malicious web script via the person parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/SA_BEA03_36.00.jsp; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6781&w=2; http://www.securityfocus.com/bid/8938
CVE: CVE-2003-0788
Published: 2003-12-01
Description: Unknown vulnerability in the Internet Printing Protocol (IPP) implementation in CUPS before 1.1.19 allows remote attackers to cause a denial of service (CPU consumption from a "busy loop") via certain inputs to the IPP port (TCP 631).
CVSS Score: 5.0 (MEDIUM)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=97958; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000779; http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000788
CVE: CVE-2003-0834
Published: 2003-12-01
Description: Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.
CVSS Score: 7.2 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20040801-01-P; http://archives.neohapsis.com/archives/hp/2003-q4/0047.html; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57414
CVE: CVE-2003-0851
Published: 2003-12-01
Description: OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-003.txt.asc; ftp://patches.sgi.com/support/free/security/advisories/20040304-01-U.asc; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1667&w=2
CVE: CVE-2003-0886
Published: 2003-12-01
Description: Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code.
CVSS Score: 10.0 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000783; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8752&w=2; http://www.debian.org/security/2003/dsa-401
CVE: CVE-2003-0913
Published: 2003-12-01
Description: Unknown vulnerability in the Terminal application for Mac OS X 10.3 (Client and Server) may allow "unauthorized access."
CVSS Score: 4.6 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=120269; http://docs.info.apple.com/article.html?artnum=61798; http://lists.apple.com/mhonarc/security-announce/msg00040.html
CVE: CVE-2003-0925
Published: 2003-12-01
Description: Buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed GTP MSISDN string.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000780; http://secunia.com/advisories/10531; http://www.debian.org/security/2003/dsa-407
CVE: CVE-2003-0926
Published: 2003-12-01
Description: Ethereal 0.9.15 and earlier, and Tethereal, allows remote attackers to cause a denial of service (crash) via certain malformed (1) ISAKMP or (2) MEGACO packets.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000780; http://secunia.com/advisories/10531; http://www.debian.org/security/2003/dsa-407
CVE: CVE-2003-0927
Published: 2003-12-01
Description: Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SOCKS dissector.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000780; http://secunia.com/advisories/10531; http://www.debian.org/security/2003/dsa-407
CVE: CVE-2003-0933
Published: 2003-12-01
Description: Buffer overflow in conquest 7.2 and earlier may allow a local user to execute arbitrary code via a long environment variable.
CVSS Score: 4.6 (MEDIUM)
References: http://www.debian.org/security/2003/dsa-398; http://www.debian.org/security/2003/dsa-398
CVE: CVE-2003-0934
Published: 2003-12-01
Description: Symbol Access Portable Data Terminal (PDT) 8100 does not hide the default WEP keys if they are not changed, which could allow attackers to retrieve the keys and gain access to the wireless network.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3880&w=2; http://www.secnap.net/security/031106.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3880&w=2
CVE: CVE-2003-0935
Published: 2003-12-01
Description: Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed.
CVSS Score: 6.4 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000778; http://sourceforge.net/forum/forum.php?forum_id=308015; http://www.redhat.com/support/errata/RHSA-2003-335.html
CVE: CVE-2003-1058
Published: 2003-12-03
Description: The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of service (Xsun crash) or to create or overwrite arbitrary files on the system, probably via a symlink attack on temporary server files.
CVSS Score: 3.7 (LOW)
References: http://secunia.com/advisories/10346; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57419-1; http://www.ciac.org/ciac/bulletins/o-033.shtml
CVE: CVE-2003-1057
Published: 2003-12-08
Description: Unknown vulnerability in CDE Print Viewer (dtprintinfo) for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/10384; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57441-1; http://www.auscert.org.au/render.html?it=3675
CVE: CVE-2003-1056
Published: 2003-12-11
Description: The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/10411; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57443-1; http://www.auscert.org.au/render.html?it=3688
CVE: CVE-2003-0089
Published: 2003-12-15
Description: Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as (1) swinstall and (2) swmodify.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0038.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1431&w=2; http://www.securityfocus.com/advisories/6030
CVE: CVE-2003-0090
Published: 2003-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2000-0844.  Reason: This candidate is a duplicate of CVE-2000-0844.  Notes: All CVE users should reference CVE-2000-0844 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2003-0327
Published: 2003-12-15
Description: Sybase Adaptive Server Enterprise (ASE) 12.5 allows remote attackers to cause a denial of service (hang) via a remote password array with an invalid length, which triggers a heap-based buffer overflow.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3805&w=2; http://www.rapid7.com/advisories/R7-0016.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/13800
CVE: CVE-2003-0628
Published: 2003-12-15
Description: PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include (SSI) files via an HTTP request with an invalid value.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4158&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4158&w=2
CVE: CVE-2003-0629
Published: 2003-12-15
Description: Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScript.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4158&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4158&w=2
CVE: CVE-2003-0795
Published: 2003-12-15
Description: The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) via a malformed telnet command to the telnet CLI port, which may trigger a null dereference.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4266&w=2; http://secunia.com/advisories/10563; http://www.debian.org/security/2004/dsa-415
CVE: CVE-2003-0812
Published: 2003-12-15
Description: Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3009&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2041&w=2; http://www.cert.org/advisories/CA-2003-28.html
CVE: CVE-2003-0820
Published: 2003-12-15
Description: Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2003-10/0163.html; http://www.security.nnov.ru/search/document.asp?docid=5243; http://www.securityfocus.com/bid/8835
CVE: CVE-2003-0821
Published: 2003-12-15
Description: Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/9010; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-050; https://exchange.xforce.ibmcloud.com/vulnerabilities/13681
CVE: CVE-2003-0822
Published: 2003-12-15
Description: Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4055&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]6759&w=2; http://secunia.com/advisories/10195
CVE: CVE-2003-0824
Published: 2003-12-15
Description: Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service (response failure) via a certain request.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/10195; http://www.kb.cert.org/vuls/id/179012; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-051
CVE: CVE-2003-0856
Published: 2003-12-15
Description: iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as other users to the kernel netlink interface.
CVSS Score: 4.9 (MEDIUM)
References: http://www.debian.org/security/2004/dsa-492; http://www.novell.com/linux/security/advisories/2005_01_sr.html; http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00004.html
CVE: CVE-2003-0858
Published: 2003-12-15
Description: Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.
CVSS Score: 2.1 (LOW)
CWE: CWE-399
References: http://secunia.com/advisories/10563; http://www.debian.org/security/2004/dsa-415; http://www.redhat.com/support/errata/RHSA-2003-305.html
CVE: CVE-2003-0859
Published: 2003-12-15
Description: The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.
CVSS Score: 4.9 (MEDIUM)
References: http://www.redhat.com/support/errata/RHSA-2003-325.html; http://www.redhat.com/support/errata/RHSA-2003-334.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11337
CVE: CVE-2003-0914
Published: 2003-12-15
Description: ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
CVSS Score: 4.3 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-003.0/CSSA-2004-003.0.txt; ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.33/CSSA-2003-SCO.33.txt; http://secunia.com/advisories/10542
CVE: CVE-2003-0932
Published: 2003-12-15
Description: Buffer overflow in omega-rpg 0.90 allows local users to execute arbitrary code via a long (1) command line or (2) environment variable.
CVSS Score: 4.6 (MEDIUM)
References: http://www.debian.org/security/2003/dsa-400; http://www.debian.org/security/2003/dsa-400
CVE: CVE-2003-0936
Published: 2003-12-15
Description: Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6251&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0752&w=2; http://securityresponse.symantec.com/avcenter/security/Content/2003.11.13.html
CVE: CVE-2003-0937
Published: 2003-12-15
Description: SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PID) by obtaining a procfs file descriptor for the file and calling execve() on a setuid or setgid program, which leaves the descriptor open to the user.
CVSS Score: 4.6 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.32/CSSA-2003-SCO.32.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3687&w=2; http://www.texonet.com/advisories/TEXONET-20031024.txt
CVE: CVE-2003-0938
Published: 2003-12-15
Description: vos24u.c in SAP database server (SAP DB) 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLAT stored procedure.
CVSS Score: 7.2 (HIGH)
References: http://www.atstake.com/research/advisories/2003/a111703-1.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/13765; http://www.atstake.com/research/advisories/2003/a111703-1.txt
CVE: CVE-2003-0939
Published: 2003-12-15
Description: eo420_GetStringFromVarPart in veo420.c for SAP database server (SAP DB) 7.4.03.27 and earlier may allow remote attackers to execute arbitrary code via a connect packet with a 256 byte segment to the niserver (aka serv.exe) process on TCP port 7269, which prevents the server from NULL terminating the string and leads to a buffer overflow.
CVSS Score: 7.5 (HIGH)
References: http://www.atstake.com/research/advisories/2003/a111703-1.txt; http://www.sapdb.org/7.4/new_relinfo.txt; http://www.atstake.com/research/advisories/2003/a111703-1.txt
CVE: CVE-2003-0940
Published: 2003-12-15
Description: Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.
CVSS Score: 5.0 (MEDIUM)
References: http://www.atstake.com/research/advisories/2003/a111703-2.txt; http://www.atstake.com/research/advisories/2003/a111703-2.txt
CVE: CVE-2003-0941
Published: 2003-12-15
Description: web-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent Administration pages and modify configuration via a direct request to waadmin.wa.
CVSS Score: 7.5 (HIGH)
References: http://www.atstake.com/research/advisories/2003/a111703-2.txt; http://www.atstake.com/research/advisories/2003/a111703-2.txt
CVE: CVE-2003-0942
Published: 2003-12-15
Description: Buffer overflow in Web Agent Administration service in web-tools for SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a long Name parameter to waadmin.wa.
CVSS Score: 7.5 (HIGH)
References: http://www.atstake.com/research/advisories/2003/a111703-2.txt; http://www.atstake.com/research/advisories/2003/a111703-2.txt
CVE: CVE-2003-0943
Published: 2003-12-15
Description: web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive information or redirect attacks against internal databases via (1) waecho, (2) Web SQL Interface (websql), or (3) Web Database Manager (webdbm).
CVSS Score: 7.5 (HIGH)
References: http://www.atstake.com/research/advisories/2003/a111703-2.txt; http://www.atstake.com/research/advisories/2003/a111703-2.txt
CVE: CVE-2003-0944
Published: 2003-12-15
Description: Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a URL with a long requestURI.
CVSS Score: 7.5 (HIGH)
References: http://www.atstake.com/research/advisories/2003/a111703-2.txt; http://www.atstake.com/research/advisories/2003/a111703-2.txt
CVE: CVE-2003-0945
Published: 2003-12-15
Description: The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities.
CVSS Score: 7.5 (HIGH)
References: http://www.atstake.com/research/advisories/2003/a111703-2.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/13774; http://www.atstake.com/research/advisories/2003/a111703-2.txt
CVE: CVE-2003-0946
Published: 2003-12-15
Description: Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the email address argument of a "MAIL FROM" command.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0683&w=2; http://sourceforge.net/project/shownotes.php?release_id=197038; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0683&w=2
CVE: CVE-2003-0947
Published: 2003-12-15
Description: Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2521&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2521&w=2
CVE: CVE-2003-0948
Published: 2003-12-15
Description: Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable.
CVSS Score: 7.2 (HIGH)
References: http://www.securiteam.com/exploits/6Y00R1P8KY.html; http://www.securityfocus.com/bid/8901; http://www.securiteam.com/exploits/6Y00R1P8KY.html
CVE: CVE-2003-0950
Published: 2003-12-15
Description: PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (system time) name of the directory used to store the file, and directly requesting that file.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/9041; http://xforce.iss.net/xforce/alerts/id/157; https://exchange.xforce.ibmcloud.com/vulnerabilities/12805
CVE: CVE-2003-0951
Published: 2003-12-15
Description: Partition Manager (parmgr) in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attackers to obtain sensitive data or gain privileges.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/hp/2003-q4/0041.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5146; http://archives.neohapsis.com/archives/hp/2003-q4/0041.html
CVE: CVE-2003-0955
Published: 2003-12-15
Description: OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code in 3.4 via a program with an invalid header that is not properly handled by (1) ibcs2_exec.c in the iBCS2 emulation (compat_ibcs2) or (2) exec_elf.c, which leads to a stack-based buffer overflow.
CVSS Score: 4.6 (MEDIUM)
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/005_exec.patch; http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013315.html; http://marc.info/?l=openbsd-security-announce&m=[PII_REDACTED]9679&w=2
CVE: CVE-2003-0960
Published: 2003-12-15
Description: OpenCA before 0.9.1.4 does not use the correct certificate in a chain to check the serial, which could cause OpenCA to accept revoked or expired certificates.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8765&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8765&w=2
CVE: CVE-2003-0961
Published: 2003-12-15
Description: Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges.
CVSS Score: 7.2 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000796; http://isec.pl/papers/linux_kernel_do_brk.pdf; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6473&w=2
CVE: CVE-2003-0962
Published: 2003-12-15
Description: Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20031202-01-U; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000794; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1602&w=2
CVE: CVE-2003-0967
Published: 2003-12-15
Description: rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1493&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6970; http://marc.info/?l=freeradius-users&m=[PII_REDACTED]9613&w=2
CVE: CVE-2003-0968
Published: 2003-12-15
Description: Stack-based buffer overflow in SMB_Logon_Server of the rlm_smb experimental module for FreeRADIUS 0.9.3 and earlier allows remote attackers to execute arbitrary code via a long User-Password attribute.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1130&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1130&w=2
CVE: CVE-2003-0970
Published: 2003-12-15
Description: The Network Management Port on Sun Fire B1600 systems allows remote attackers to cause a denial of service (packet loss) via ARP packets, which cause all ports to become temporarily disabled.
CVSS Score: 5.0 (MEDIUM)
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57430; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57430
CVE: CVE-2003-0971
Published: 2003-12-15
Description: GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000798; http://lists.gnupg.org/pipermail/gnupg-announce/2003q4/000276.html