morpheuslord/cve-llm-training huggingface dataset:
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0963.

assistant: Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0965.

assistant: Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0966.

assistant: Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code via a long Subject line.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0967.

assistant: rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0968.

assistant: Stack-based buffer overflow in SMB_Logon_Server of the rlm_smb experimental module for FreeRADIUS 0.9.3 and earlier allows remote attackers to execute arbitrary code via a long User-Password attribute.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0969.

assistant: mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0970.

assistant: The Network Management Port on Sun Fire B1600 systems allows remote attackers to cause a denial of service (packet loss) via ARP packets, which cause all ports to become temporarily disabled.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0971.

assistant: GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0972.

assistant: Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0973.

assistant: Unknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service (httpd crash) via a certain query string.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0974.

assistant: Applied Watch Command Center allows remote attackers to conduct unauthorized activities without authentication, such as (1) add new users to a console, as demonstrated using appliedsnatch.c, or (2) add spurious IDS rules to sensors, as demonstrated using addrule.c.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0975.

assistant: Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0976.

assistant: NFS Server (XNFS.NLM) for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could allow users to mount file systems when XNFS should deny the host.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0977.

assistant: CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0978.

assistant: Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious keyserver to cause a denial of service (crash) and possibly execute arbitrary code during key retrieval.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0979.

assistant: FreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which allows remote attackers to (1) use VisitorBook as an open mail relay, when $mailuser is 1, via extra headers in the email field, or (2) cause the guestbook database to be deleted via a large number of line breaks that exceeds the $max_posts variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0980.

assistant: Cross-site scripting (XSS) vulnerability in FreeScripts VisitorBook LE (visitorbook.pl) allows remote attackers to inject arbitrary HTML or web script via (1) the "do" parameter, (2) via the "user" parameter from a host with a malicious reverse DNS name, (3) via quote marks or ampersands in other parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0981.

assistant: FreeScripts VisitorBook LE (visitorbook.pl) logs the reverse DNS name of a visiting host, which allows remote attackers to spoof the origin of their incoming requests and facilitate cross-site scripting (XSS) attacks.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0982.

assistant: Buffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11, and 5.x before 5.0.5, allows remote attackers to execute arbitrary code via a long password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0983.

assistant: Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, which allows local or remote attackers to conduct unauthorized activities via (1) a "bubba" local user account, (2) an open TCP port 34571, or (3) when a local DHCP server is unavailable, a DHCP server on the manufacturer's test network.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0984.

assistant: Real time clock (RTC) routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0985.

assistant: The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0986.

assistant: Various routines for the ppc64 architecture on Linux kernel 2.6 prior to 2.6.2 and 2.4 prior to 2.4.24 do not use the copy_from_user function when copying data from userspace to kernelspace, which crosses security boundaries and allows local users to cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0987.

assistant: mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0988.

assistant: Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in KDE 3.1.0 through 3.1.4 allows attackers to execute arbitrary code via a VCF file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0989.

assistant: tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0990.

assistant: The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the "To:" field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0991.

assistant: Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of service (crash) via malformed e-mail commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0992.

assistant: Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0993.

assistant: mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0994.

assistant: The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain SYSTEM privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0995.

assistant: Buffer overflow in the Microsoft Message Queue Manager (MSQM) allows remote attackers to cause a denial of service (RPC service crash) via a queue registration request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0996.

assistant: Unknown "System Security Vulnerability" in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 allows attackers to gain privileges via the help interface.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0997.

assistant: Unknown "Denial of Service Attack" vulnerability in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 allows attackers to cause a denial of service (CPU consumption in URC host service).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0998.

assistant: Unknown "potential system security vulnerability" in Computer Associates (CA) Unicenter Remote Control 5.0 through 5.2, and ControlIT 5.0 and 5.1, may allow attackers to gain privileges to the local system account.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0999.

assistant: Unknown multiple vulnerabilities in (1) lpstat and (2) the libprint library in Solaris 2.6 through 9 may allow attackers to execute arbitrary code or read or write arbitrary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1000.

assistant: xchat 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an invalid ID number, which causes a null dereference.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1001.

assistant: Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth requests for (1) TACACS+ or (2) RADIUS authentication.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1002.

assistant: Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is set.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1003.

assistant: Cisco PIX firewall 5.x.x, and 6.3.1 and earlier, allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is set.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1004.

assistant: Cisco PIX firewall 6.2.x through 6.2.3, when configured as a VPN Client, allows remote attackers to cause a denial of service (dropped IPSec tunnel connection) via an IKE Phase I negotiation request to the outside interface of the firewall.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1005.

assistant: The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (service crash) via malformed ASN.1 sequences.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1006.

assistant: Buffer overflow in cd9660.util in Apple Mac OS X 10.0 through 10.3.2 and Apple Mac OS X Server 10.0 through 10.3.2 may allow local users to execute arbitrary code via a long command line parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1007.

assistant: AppleFileServer (AFS) in Apple Mac OS X 10.2.8 and 10.3.2 does not properly handle certain malformed requests, with unknown impact.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1008.

assistant: Unknown vulnerability in Mac OS X 10.2.8 and 10.3.2 allows local users to bypass the screen saver login window and write a text clipping to the desktop or another application.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1009.

assistant: Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remote attackers to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1010.

assistant: Unknown vulnerability in fs_usage in Mac OS X 10.2.8 and 10.3.2 and Mac OS X Server 10.2.8 and 10.3.2 allows local users to gain privileges via unknown attack vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1011.

assistant: Apple Mac OS X 10.0 through 10.2.8 allows local users with a USB keyboard to gain unauthorized access by holding down the CTRL and C keys when the system is booting, which crashes the init process and leaves the user in a root shell.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1012.

assistant: The SMB dissector in Ethereal before 0.10.0 allows remote attackers to cause a denial of service via a malformed SMB packet that triggers a segmentation fault during processing of Selected packets.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1013.

assistant: The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q.931, which triggers a null dereference.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1014.

assistant: Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use multiple MIME fields with the same name, which may be interpreted differently by mail clients.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1015.

assistant: Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which may be interpreted differently by mail clients.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1016.

assistant: Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers, parameters, and values, including (1) fields that should not be quoted, (2) duplicate quotes, or (3) missing leading or trailing quote characters, which may be interpreted differently by mail clients.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1017.

assistant: Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1018.

assistant: Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1020.

assistant: The format_send_to_gui function in formats.c for irssi before 0.8.9 allows remote IRC users to cause a denial of service (crash).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1021.

assistant: The scosession program in OpenServer 5.0.6 and 5.0.7 allows local users to gain privileges via crafted strings on the commandline.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1022.

assistant: Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1023.

assistant: Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1024.

assistant: Unknown vulnerability in the ls-F builtin function in tcsh on Solaris 8 allows local users to create or delete files as other users, and gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1025.

assistant: Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1026.

assistant: Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the "Travel Log Cross Domain Vulnerability."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1027.

assistant: Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1028.

assistant: The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an invalid ContentType and a .htm file, which could allow remote attackers to bypass security mechanisms that rely on random names, as demonstrated by threadid10008.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1029.

assistant: The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_print to use a bad length value when calling print_octets.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1030.

assistant: Buffer overflow in DameWare Mini Remote Control before 3.73 allows remote attackers to execute arbitrary code via a long pre-authentication request to TCP port 6129.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1031.

assistant: Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as (1) "Interests-Hobbies", (2) "Biography", or (3) "Occupation."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1032.

assistant: Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink, allows remote attackers to cause a denial of service (crash) via a malformed URL to the web server, possibly involving a buffer overflow.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1033.

assistant: The (1) instdbmsrv and (2) instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT environment variable as a path when assigning setuid permissions to the lserver program, which allows local users to gain root privileges via a modified INSTROOT that points to a malicious dbmsrv or lserver program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1034.

assistant: The RPM installation of SAP DB 7.x creates the (1) dbmsrv or (2) lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1035.

assistant: The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1036.

assistant: Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code via long (1) ~command, (2) ~runtimemode, or (3) ~session parameters, or (4) a long HTTP Content-Type header.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1037.

assistant: Format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS) allows remote attackers to execute arbitrary code via a high "trace level."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1038.

assistant: The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1039.

assistant: Multiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute arbitrary code via a long HTTP Host header to (1) Message Server, (2) Web Dispatcher, or (3) Application Server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1040.

assistant: kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service (crash) by sending certain signals to kmod.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1041.

assistant: Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm extension.  NOTE: this bug may overlap CVE-2004-0475.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1042.

assistant: SQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and earlier allows remote authenticated users with editproducts privileges to execute arbitrary SQL via the product name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1043.

assistant: SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1044.

assistant: editproducts.cgi in Bugzilla 2.16.3 and earlier, when usebuggroups is enabled, does not properly remove group add privileges from a group that is being deleted, which allows users with those privileges to perform unauthorized additions to the next group that is assigned with the original group ID.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1045.

assistant: votes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote attackers to read a user's voting page when that user has voted on a restricted bug, which allows remote attackers to read potentially sensitive voting information by modifying the who parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1046.

assistant: describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows remote attackers to list component descriptions for otherwise restricted products.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1048.

assistant: Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1049.

assistant: IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to modify or delete certain DB2 files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1050.

assistant: Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1051.

assistant: Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1052.

assistant: IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1053.

assistant: Multiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long (1) -KCONV command line option or (2) XSHISENLIB environment variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1054.

assistant: mod_access_referer 1.0.2 allows remote attackers to cause a denial of service (crash) via a malformed Referer header that is missing a hostname, as parsed by the ap_parse_uri_components function in Apache, which triggers a null dereference.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1055.

assistant: Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDAP lookup.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1056.

assistant: The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1057.

assistant: Unknown vulnerability in CDE Print Viewer (dtprintinfo) for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1058.

assistant: The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of service (Xsun crash) or to create or overwrite arbitrary files on the system, probably via a symlink attack on temporary server files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1059.

assistant: Unknown vulnerability in the libraries for the PGX32 frame buffer in Solaris 2.5.1 and 2.6 through 9 allows local users to gain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1060.

assistant: The NFS Server for Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (UFS panic) via certain invalid UFS requests, which triggers a null dereference.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1061.

assistant: Race condition in Solaris 2.6 through 9 allows local users to cause a denial of service (kernel panic), as demonstrated via the namefs function, pipe, and certain STREAMS routines.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1062.

assistant: Unknown vulnerability in the sysinfo system call for Solaris for SPARC 2.6 through 9, and Solaris for x86 2.6, 7, and 8, allows local users to read kernel memory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1063.

assistant: The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1064.

assistant: Solaris 8 with IPv6 enabled allows remote attackers to cause a denial of service (kernel panic) via a crafted IPv6 packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1065.

assistant: Unknown vulnerability in patches 108993-14 through 108993-19 and 108994-14 through 108994-19 for Solaris 8 may allow local users to cause a denial of service (automountd crash).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1066.

assistant: Buffer overflow in the syslog daemon for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (syslogd crash) and possibly execute arbitrary code via long syslog UDP packets.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1067.

assistant: Multiple buffer overflows in the (1) dbm_open function, as used in ndbm and dbm, and the (2) dbminit function in Solaris 2.6 through 9 allow local users to gain root privileges via long arguments to Xsun or other programs that use these functions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1068.

assistant: Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4659277, a different vulnerability than CVE-2003-1082.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1069.

assistant: The Telnet daemon (in.telnetd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (CPU consumption by infinite loop).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1070.

assistant: Unknown vulnerability in rpcbind for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (rpcbind crash).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1071.

assistant: rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing stderr before executing wall, then supplying a spoofed from header.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1072.

assistant: Memory leak in lofiadm in Solaris 8 allows local users to cause a denial of service (kernel memory consumption).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1073.

assistant: A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1074.

assistant: Unknown vulnerability in newtask for Solaris 9 allows local users to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1075.

assistant: Unknown vulnerability in the FTP server (in.ftpd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (temporary FTP server hang), which affects other active mode FTP clients.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1076.

assistant: Unknown vulnerability in sendmail for Solaris 7, 8, and 9 allows local users to cause a denial of service (unknown impact) and possibly gain privileges via certain constructs in a .forward file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1077.

assistant: Unknown vulnerability in UFS for Solaris 9 for SPARC, with logging enabled, allows local users to cause a denial of service (UFS file system hang).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1078.

assistant: The FTP client for Solaris 2.6, 7, and 8 with the debug (-d) flag enabled displays the user password on the screen during login.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1079.

assistant: Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service (memory consumption) via certain arguments in RPC calls that cause large amounts of memory to be allocated.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1080.

assistant: Unknown vulnerability in mail for Solaris 2.6 through 9 allows local users to read the email of other users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1081.

assistant: Aspppls for Solaris 8 allows local users to overwrite arbitrary files via a symlink attack on the .asppp.fifo temporary file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1082.

assistant: Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4705891, a different vulnerability than CVE-2003-1068.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1083.

assistant: Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1084.

assistant: Monit 1.4 to 4.1 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request with a negative Content-Length field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1085.

assistant: The HTTP server in the Thomson TWC305, TWC315, and TCW690 cable modem ST42.03.0a allows remote attackers to cause a denial of service (unstable service) via a long GET request, possibly caused by a buffer overflow.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1086.

assistant: PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote attackers to execute arbitrary PHP code by modifying the pm_path parameter to reference a URL on a remote web server that contains the code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1087.

assistant: Unknown vulnerability in diagmond and possibly other applications in HP9000 Series 700/800 running HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows remote attackers to cause a denial of service (program failure) via certain network traffic.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1088.

assistant: Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML via the method parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1089.

assistant: index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the path in a PHP error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1090.

assistant: Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1091.

assistant: Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed ID3 tags in MP3 files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1092.

assistant: Unknown vulnerability in the "Automatic File Content Type Recognition (AFCTR) Tool version of the file package before 3.41, related to "a memory allocation problem," has unknown impact.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1093.

assistant: BEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inaccessible, may leak the user's password when it throws a ResourceAllocationException.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1094.

assistant: BEA WebLogic Server and Express version 7.0 SP3 may follow certain code execution paths that result in an incorrect current user, such as in the frequent use of JNDI initial contexts, which could allow remote authenticated users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1095.

assistant: BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication information when a web application is redeployed, which could allow users of that application to gain access without having to re-authenticate.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1096.

assistant: The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, which makes it easier for remote attackers to gain privileges via brute force password guessing attacks.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1097.

assistant: Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privileges via a long -l option.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1098.

assistant: The Xserver for HP-UX 11.22 was not properly built, which introduced a vulnerability that allows local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1099.

assistant: shar on HP-UX B.11.00, B.11.04, and B.11.11 creates temporary files with predictable names in /tmp, which allows local users to cause a denial of service and possibly execute arbitrary code via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1100.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allow remote attackers to inject arbitrary web script or HTML via certain vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1101.

assistant: Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allows remote attackers to obtain the full path of the DM Web Server via invalid login credentials, which reveals the path in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1102.

assistant: Hummingbird CyberDOCS 3.5, 3.9, and 4.0, when running on IIS, uses insecure permissions for script source code files, which allows remote attackers to read the source code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1103.

assistant: SQL injection vulnerability in loginact.asp for Hummingbird CyberDOCS before 3.9 allows remote attackers to execute arbitrary SQL commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1104.

assistant: Buffer overflow in IBM Tivoli Firewall Toolbox (TFST) 1.2 allows remote attackers to execute arbitrary code via unknown vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1105.

assistant: Unknown vulnerability in Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to cause a denial of service (browser or Outlook Express crash) via HTML with certain input tags that are not properly rendered.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1106.

assistant: The SMTP service in Microsoft Windows 2000 before SP4 allows remote attackers to cause a denial of service (crash or hang) via an e-mail message with a malformed time stamp in the FILETIME attribute.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1107.

assistant: The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1108.

assistant: The Session Initiation Protocol (SIP) implementation in Alcatel OmniPCX Enterprise 5.0 Lx allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1109.

assistant: The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1110.

assistant: The Session Initiation Protocol (SIP) implementation in Columbia SIP User Agent (sipc) 1.74 and other versions before sipc 2.0 build 2003-02-21 allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1111.

assistant: The Session Initiation Protocol (SIP) implementation in multiple dynamicsoft products including y and certain demo products for AppEngine allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1112.

assistant: The Session Initiation Protocol (SIP) implementation in Ingate Firewall and Ingate SIParator before 3.1.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1113.

assistant: The Session Initiation Protocol (SIP) implementation in IPTel SIP Express Router 0.8.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1114.

assistant: The Session Initiation Protocol (SIP) implementation in Mediatrix Telecom VoIP Access Devices and Gateways running SIPv2.4 and SIPv4.3 firmware allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.