morpheuslord/cve-llm-training huggingface dataset:
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1410.

assistant: PHP remote file inclusion vulnerability in email.php (aka email.php3) in Cedric Email Reader 0.2 and 0.3 allows remote attackers to execute arbitrary PHP code via the cer_skin parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1411.

assistant: PHP remote file inclusion vulnerability in emailreader_execute_on_each_page.inc.php in Cedric Email Reader 0.4 allows remote attackers to execute arbitrary PHP code via the emailreader_ini parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1412.

assistant: PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator (GOsa) 1.0 allows remote attackers to execute arbitrary PHP code via the plugin parameter to (1) 3fax/1blocklists/index.php; (2) 6departamentadmin/index.php, (3) 5terminals/index.php, (4) 4mailinglists/index.php, (5) 3departaments/index.php, and (6) 2groupd/index.php in 2administration/; or (7) the base parameter to include/help.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1413.

assistant: parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using ".." sequences in the filename parameter and comparing the resulting error messages.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1414.

assistant: Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via a ... (triple dot) in the filename parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1415.

assistant: NetCharts XBRL Server 4.0.0 allows remote attackers to obtain sensitive information via an HTTP request with an invalid chunked transfer encoding specification.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1416.

assistant: BisonFTP Server 4 release 2 allows remote attackers to cause a denial of service (CPU consumption) via a long (1) ls or (2) cwd command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1417.

assistant: nCipher Support Software 6.00, when using generatekey KeySafe to import keys, does not delete the temporary copies of the key, which may allow local users to gain access to the key by reading the (1) key.pem or (2) key.der files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1418.

assistant: Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the ETag header, which reveals the inode number, or (2) multipart MIME boundary, which reveals child process IDs (PID).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1419.

assistant: Netscape 7.0 allows remote attackers to cause a denial of service (crash) via a web page with an invalid regular expression argument to the JavaScript reformatDate function.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1420.

assistant: Cross-site scripting (XSS) vulnerability in Opera 6.0 through 7.0 with automatic redirection disabled allows remote attackers to inject arbitrary web script or HTML via the HTTP Location header.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1421.

assistant: Unspecified vulnerability in mod_mysql_logger shared object in SuckBot 0.006 allows remote attackers to cause a denial of service (seg fault) via unknown attack vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1422.

assistant: Multiple unspecified vulnerabilities in the installer for SYSLINUX 2.01, when running setuid root, allow local users to gain privileges via unknown vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1423.

assistant: Petitforum stores the liste.txt data file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as e-mail addresses and encrypted passwords.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1424.

assistant: message.php in Petitforum does not properly authenticate users, which allows remote attackers to impersonate forum users via a modified connect cookie.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1425.

assistant: guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1426.

assistant: Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPT_FILENAME environment variable to Perl's @INC include array, which allows local users to execute arbitrary code by modifying SCRIPT_FILENAME to reference a directory containing a malicious openwebmail-shared.pl executable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1427.

assistant: Directory traversal vulnerability in the web configuration interface in Netgear FM114P 1.4 allows remote attackers to read arbitrary files, such as the netgear.cfg configuration file, via a hex-encoded (%2e%2e%2f) ../ (dot dot slash) in the port parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1428.

assistant: Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1429.

assistant: Buffer overflow in Proxomitron Naoko 4.4 allows remote attackers to execute arbitrary code via a long request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1430.

assistant: Directory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote attackers to access known files via a ".." (dot dot) in an unreal:// URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1431.

assistant: Buffer overflow in Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (crash) via a long host string in the Unreal URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1432.

assistant: Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with a negative size value, which is treated as a large positive number during memory allocation, or (2) a negative size value in a package file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1433.

assistant: Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game multiple times.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1434.

assistant: login_ldap 3.1 and 3.2 allows remote attackers to initiate unauthenticated bind requests if (1) bind_anon_dn is on, which allows a bind with no password provided, (2) bind_anon_cred is on, which allows a bind with no DN, or (3) bind_anon is on, which allows a bind with no DN or password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1435.

assistant: SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary SQL commands via the days parameter to the search module.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1436.

assistant: PHP remote file inclusion vulnerability in nukebrowser.php in Nukebrowser 2.1 to 2.5 allows remote attackers to execute arbitrary PHP code via the filhead parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1437.

assistant: BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1438.

assistant: Race condition in BEA WebLogic Server and Express 5.1 through 7.0.0.1, when using in-memory session replication or replicated stateful session beans, causes the same buffer to be provided to two users, which could allow one user to see session data that was intended for another user.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1439.

assistant: Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1440.

assistant: SpamProbe 0.8a allows remote attackers to cause a denial of service (crash) via HTML e-mail with newline characters within an href tag, which is not properly handled by certain regular expressions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1441.

assistant: Posadis 0.50.4 through 0.50.8 allows remote attackers to cause a denial of service (crash) via a DNS message without a question section, which triggers null dereference.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1442.

assistant: The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1443.

assistant: Kaspersky Antivirus (KAV) 4.0.9.0 does not detect viruses in files with MS-DOS device names in their filenames, which allows local users to bypass virus protection, as demonstrated using aux.vbs and aux.com.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1444.

assistant: Kaspersky Antivirus (KAV) 4.0.9.0 allows local users to cause a denial of service (CPU consumption or crash) and prevent malicious code from being detected via a file with a long pathname.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1445.

assistant: Stack-based buffer overflow in Far Manager 1.70beta1 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long pathname.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1446.

assistant: Buffer overflow in the save_into_file function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a ~ (tilde).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1447.

assistant: IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt passwords when the configuration file is exported to XML.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1448.

assistant: Memory leak in the Windows 2000 kernel allows remote attackers to cause a denial of service (SMB request hang) via a NetBIOS continuation packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1449.

assistant: Aladdin Knowlege Systems eSafe Gateway 3.5.126.0 does not check the entire stream of Content Vectoring Protocol (CVP) data, which allows remote attackers to bypass virus protection.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1450.

assistant: BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service (segmentation fault) via a malformed RPL_NAMREPLY numeric 353 message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1451.

assistant: Buffer overflow in Symantec Norton AntiVirus 2002 allows remote attackers to execute arbitrary code via an e-mail attachment with a compressed ZIP file that contains a file with a long filename.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1452.

assistant: Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1453.

assistant: Cross-site scripting (XSS) vulnerability in the MytextSanitizer function in XOOPS 1.3.5 through 1.3.9 and XOOPS 2.0 through 2.0.1 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in an IMG tag.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1454.

assistant: Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie in plaintext, which could allow remote attackers to gain access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1455.

assistant: Multiple buffer overflows in the launch_bcrelay function in pptpctrl.c in PoPToP 1.1.4-b1 through PoPToP 1.1.4-b3 allow local users to execute arbitrary code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1456.

assistant: Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via unknown attack vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1457.

assistant: Auerswald COMsuite CTI ControlCenter 3.1 creates a default "runasositron" user account with an easily guessable password, which allows local users or remote attackers to gain access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1458.

assistant: SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to execute arbitrary SQL commands via the member name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1459.

assistant: Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote attackers to execute arbitrary PHP code via the (1) template parameter in News.php or (2) installdir parameter in install.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1460.

assistant: Worker Filemanager 1.0 through 2.7 sets the permissions on the destination directory to world-readable and executable while copying data, which could allow local users to obtain sensitive information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1461.

assistant: Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument.  NOTE: the vendor was unable to reproduce the problem on a system that had been patched for an lp vulnerability (CVE-2002-1473).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1462.

assistant: mod_survey 3.0.0 through 3.0.15-pre6 does not check whether a survey exists before creating a subdirectory for it, which allows remote attackers to cause a denial of service (disk consumption and possible crash).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1463.

assistant: Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1) determine the installation path by reading the contents of the Name parameter in a link, and (2) read arbitrary files via an absolute path in the Name parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1464.

assistant: Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service (disconnect and unavailable inbox) via a Short Message Service (SMS) message with a long image name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1465.

assistant: Directory traversal vulnerability in download.php in Phorum 3.4 through 3.4.2 allows remote attackers to read arbitrary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1466.

assistant: Unspecified vulnerability in Phorum 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to other sites via (1) register.php or (2) login.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1467.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (4) common.php in Phorum before 3.4.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1468.

assistant: The Web_Links module in PHP-Nuke 6.0 through 6.5 final allows remote attackers to obtain the full web server path via an invalid cid parameter that is non-numeric or null, which leaks the pathname in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1469.

assistant: The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1470.

assistant: Buffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a CREATE command with a long mailbox name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1471.

assistant: MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service (crash) via a (1) DELE or (2) UIDL with a negative number.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1472.

assistant: Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long banner.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1473.

assistant: Buffer overflow in LTris 1.0.1 of FreeBSD Ports Collection 2003-02-25 and earlier allows local users to execute arbitrary code with gid "games" permission via a long HOME environment variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1474.

assistant: slashem-tty in the FreeBSD Ports Collection is installed with write permissions for the games group, which allows local users with group games privileges to modify slashem-tty and execute arbitrary code as other users, as demonstrated using a separate vulnerability in LTris.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1475.

assistant: Netbus 1.5 through 1.7 allows more than one client to be connected at the same time, but only prompts the first connection for authentication, which allows remote attackers to gain access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1476.

assistant: Cerberus FTP Server 2.1 stores usernames and passwords in plaintext, which could allow local users to gain access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1477.

assistant: MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) via a PowerPoint attachment that either (1) is corrupt or (2) contains "embedded objects."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1478.

assistant: Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with a "xFFxFE" byte sequence and a large number of CRLF sequences, as demonstrated using freeze.htm.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1479.

assistant: Cross-site scripting (XSS) vulnerability in webcamXP 1.02.432 and 1.02.535 allows remote attackers to inject arbitrary web script or HTML via the message field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1480.

assistant: MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1481.

assistant: CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1482.

assistant: The backup configuration file for Microsoft MN-500 wireless base station stores administrative passwords in plaintext, which allows local users to gain access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1483.

assistant: FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1484.

assistant: Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) by creating a DHTML link that uses the AnchorClick "A" object with a blank href attribute.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1485.

assistant: Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contains "multiple extensions combined with large blocks of white space."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1486.

assistant: Phorum 3.4 through 3.4.2 allows remote attackers to obtain the full path of the web server via an incorrect HTTP request to (1) smileys.php, (2) quick_listrss.php, (3) purge.php, (4) news.php, (5) memberlist.php, (6) forum_listrss.php, (7) forum_list_rdf.php, (8) forum_list.php, or (9) move.php, which leaks the information in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1487.

assistant: Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1488.

assistant: The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator access via a request to admin.php without the connect parameter and with the loggedin parameter set to any value, such as 1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1489.

assistant: upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the file cookie in form.php, then downloading the file from the image gallery.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1490.

assistant: SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service (device reset) via a long HTTP POST to the internal interface, possibly due to a buffer overflow.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1491.

assistant: Kerio Personal Firewall (KPF) 2.1.4 has a default rule to accept incoming packets from DNS (UDP port 53), which allows remote attackers to bypass the firewall filters via packets with a source port of 53.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1492.

assistant: Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . (dot) at the end.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1493.

assistant: Memory leak in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (memory exhaustion) via crafted TCP packets.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1494.

assistant: Unspecified vulnerability in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (CPU consumption) via a crafted TCP packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1495.

assistant: Unspecified vulnerability in the non-SSL web agent in various HP Management Agent products allows local users or remote attackers to gain privileges or cause a denial of service via unknown attack vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1496.

assistant: Unspecified vulnerability in CDE dtmailpr of HP Tru64 4.0F through 5.1B allows local users to gain privileges via unknown attack vectors. NOTE: due to lack of details in the vendor advisory, it is not clear whether this is the same issue as CVE-1999-0840.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1497.

assistant: Buffer overflow in the system log viewer of Linksys BEFSX41 1.44.3 allows remote attackers to cause a denial of service via an HTTP request with a long Log_Page_Num variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1498.

assistant: Cross-site scripting (XSS) vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allows remote attackers to inject arbitrary web script or HTML via the zoom_query parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1499.

assistant: Directory traversal vulnerability in index.php in Bytehoard 0.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the infolder parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1500.

assistant: PHP remote file inclusion vulnerability in _functions.php in cpCommerce 0.5f allows remote attackers to execute arbitrary code via the prefix parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1501.

assistant: Directory traversal vulnerability in the file upload CGI of Gast Arbeiter 1.3 allows remote attackers to write arbitrary files via a .. (dot dot) in the req_file parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1502.

assistant: mod_throttle 3.0 allows local users with Apache privileges to access shared memory that points to a file that is writable by the apache user, which could allow local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1503.

assistant: Buffer overflow in AOL Instant Messenger (AIM) 5.2.3292 allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1504.

assistant: SQL injection vulnerability in variables.php in Goldlink 3.0 allows remote attackers to execute arbitrary SQL commands via the (1) vadmin_login or (2) vadmin_pass cookie in a request to goldlink.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1505.

assistant: Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) by creating a web page or HTML e-mail with a textarea in a div element whose scrollbar-base-color is modified by a CSS style, which is then moved.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1506.

assistant: Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the DENIEDURL parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1507.

assistant: Planet Technology WGSD-1020 and WSW-2401 Ethernet switches use a default "superuser" account with the "planet" password, which allows remote attackers to gain administrative access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1508.

assistant: Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window, allows remote attackers to cause a denial of service (crash) via a long filename.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1509.

assistant: Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file before the temp file is executed by the default web browser.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1510.

assistant: TinyWeb 1.9 allows remote attackers to cause a denial of service (CPU consumption) via a ".%00." in an HTTP GET request to the cgi-bin directory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1511.

assistant: Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to test.txt, (2) the guestName parameter to the custMsg servlet, or (3) the cookiename parameter to the CookieExample servlet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1512.

assistant: Buffer overflow in mIRC 6.1 and 6.11 allows remote attackers to cause a denial of service (crash) via a long DCC SEND request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1513.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) env.jsp, (2) form.jsp, (3) session.jsp, (4) the move parameter to tictactoe.jsp, or the (5) name or (6) comment fields to guestbook.jsp.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1514.

assistant: eMule 0.29c allows remote attackers to cause a denial of service (crash) via a long password, possibly due to a buffer overflow.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1515.

assistant: Origo ASR-8100 ADSL Router 3.21 has an administration service running on port 254 that does not require a password, which allows remote attackers to cause a denial of service by restoring the factory defaults.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1516.

assistant: The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote attackers to read or write data belonging to a signed applet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1517.

assistant: cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an invalid db parameter, which leaks the path in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1518.

assistant: Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a long syslog message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1519.

assistant: Cross-site scripting (XSS) vulnerability in Vivisimo clustering engine allows remote attackers to inject arbitrary web script or HTML via the query parameter to the search program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1520.

assistant: SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL commands via the email parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1521.

assistant: Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1522.

assistant: Cross-site scripting (XSS) vulnerability in PSCS VPOP3 Web Mail server 2.0e and 2.0f allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to the admin/index.html page.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1523.

assistant: SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute arbitrary SQL commands via the (1) login username, (2) mailbox name, and possibly other attack vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1524.

assistant: PGPi PGPDisk 6.0.2i does not unmount a PGP partition when the switch user function in Windows XP is used, which could allow local users to access data on another user's PGP partition.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1525.

assistant: Unspecified vulnerability in My Photo Gallery 3.5, and possibly earlier versions, has unknown impact and attack vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1526.

assistant: PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) ", (2) ', or (3) > in the search field, which reveals the path in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1527.

assistant: BlackICE Defender 2.9.cap and Server Protection 3.5.cdf, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1528.

assistant: nsr_shutdown in Fujitsu Siemens NetWorker 6.0 allows local users to overwrite arbitrary files via a symlink attack on the nsrsh[PID] temporary file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1529.

assistant: Directory traversal vulnerability in Seagull Software Systems J Walk application server 3.2C9, and other versions before 3.3c4, allows remote attackers to read arbitrary files via a ".%252e" (encoded dot dot) in the URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1530.

assistant: SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the mark[] parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1531.

assistant: Cross-site scripting (XSS) vulnerability in testcgi.exe in Lilikoi Software Ceilidh 2.70 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1532.

assistant: SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows remote attackers to execute arbitrary SQL commands via the (1) identifiant and (2) password parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1533.

assistant: SQL injection vulnerability in accesscontrol.php in PhpPass 2 allows remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1534.

assistant: Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) aim, (4) yim, (5) location, and (6) comment variables.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1535.

assistant: Justice Guestbook 1.3 allows remote attackers to obtain the full installation path via a direct request to cfooter.php3, which leaks the path in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1536.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to inject arbitrary web script or HTML via (1) the q parameter to search.php and (2) the year parameter to calendar.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1537.

assistant: Directory traversal vulnerability in PostNuke 0.723 and earlier allows remote attackers to include arbitrary files named theme.php via the theme parameter to index.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1538.

assistant: susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not properly filter shell metacharacters, which allows remote attackers to execute arbitrary commands via CGI queries.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1539.

assistant: Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before 0.21 allows remote attackers to inject arbitrary web script or HTML via (1) file names and (2) directory names.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1540.

assistant: WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain authentication information via a direct request to (1) !pwds.txt and (2) !nicks.txt.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1541.

assistant: PlanetMoon Guestbook tr3.a stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin script password, and other passwords, via a direct request to files/passwd.txt.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1542.

assistant: Directory traversal vulnerability in plugins/file.php in phpWebFileManager before 0.4.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the fm_path parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1543.

assistant: Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1544.

assistant: Unrestricted critical resource lock in Terminal Services for Windows 2000 before SP4 and Windows XP allows remote authenticated users to cause a denial of service (reboot) by obtaining a read lock on msgina.dll, which prevents msgina.dll from being loaded.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1545.

assistant: Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read arbitrary files via a full pathname in the file parameter.  NOTE: This was originally reported as an issue in PHP-Nuke 6.5, but this is an independent addon.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1546.

assistant: Cross-site scripting (XSS) vulnerability in gbook.php in Filebased guestbook 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the comment section.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1547.

assistant: Cross-site scripting (XSS) vulnerability in block-Forums.php in the Splatt Forum module for PHP-Nuke 6.x allows remote attackers to inject arbitrary web script or HTML via the subject parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1548.

assistant: MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to obtain sensitive information via an invalid IDAdmin or other parameter, which reveals the installation path in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1549.

assistant: Cross-site scripting (XSS) vulnerability in header.php in MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the ma_kw parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1550.

assistant: XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsOption parameter, which reveals the installation path in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1551.

assistant: Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown impact and attack vectors related to "malicious script."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1552.

assistant: Unrestricted file upload vulnerability in uploader.php in Uploader 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1553.

assistant: Haakon Nilsen Simple Internet Publishing System (SIPS) 0.2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password and other user information via a direct request to a user-specific configuration directory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1554.

assistant: Cross-site scripting (XSS) vulnerability in scozbook/add.php in ScozNet ScozBook 1.1 BETA allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) useremail, (3) aim, (4) msn, (5) sitename and (6) siteaddy variables.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1555.

assistant: ScozNet ScozBook 1.1 BETA allows remote attackers to obtain sensitive information via an invalid PG parameter in view.php, which reveals the installation path in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1556.

assistant: Cross-site scripting (XSS) vulnerability in cc_guestbook.pl in CGI City CC GuestBook allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) homepage_title (webpage title) parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1557.

assistant: Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B"), allows remote attackers to execute arbitrary code via email containing headers with leading "." characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1558.

assistant: Buffer overflow in httpd.c of fnord 1.6 allows remote attackers to create a denial of service (crash) and possibly execute arbitrary code via a long CGI request passed to the do_cgi function.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1559.

assistant: Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1560.

assistant: Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1561.

assistant: Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1562.

assistant: sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190.