rainbutterfly/cve_corpus huggingface dataset:
CVE-2003-0949 
xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-01-14T05:00:00.000Z
CVE-2003-0950 
PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (system time) name of the directory used to store the file, and directly requesting that file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-11-18T05:00:00.000Z
CVE-2003-0951 
Partition Manager (parmgr) in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attackers to obtain sensitive data or gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-11-18T05:00:00.000Z
CVE-2003-0954 
Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-14T04:00:00.000Z
CVE-2003-0955 
OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code in 3.4 via a program with an invalid header that is not properly handled by (1) ibcs2_exec.c in the iBCS2 emulation (compat_ibcs2) or (2) exec_elf.c, which leads to a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-11-21T05:00:00.000Z
CVE-2003-0956 
Multiple race conditions in the handling of O_DIRECT in Linux kernel prior to version 2.4.22 could cause stale data to be returned from the disk when handling sparse files, or cause incorrect data to be returned when a file is truncated as it is being read, which might allow local users to obtain sensitive data that was originally owned by other users, a different vulnerability than CVE-2003-0018.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-02-16T20:00:00.000Z
CVE-2003-0959 
Multiple integer overflows in the 32bit emulation for AMD64 architectures in Linux 2.4 kernel before 2.4.21 allows attackers to cause a denial of service or gain root privileges via unspecified vectors that trigger copy_from_user function calls with improper length arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T01:00:00.000Z
CVE-2003-0960 
OpenCA before 0.9.1.4 does not use the correct certificate in a chain to check the serial, which could cause OpenCA to accept revoked or expired certificates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-02T05:00:00.000Z
CVE-2003-0961 
Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-02T05:00:00.000Z
CVE-2003-0962 
Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-10T05:00:00.000Z
CVE-2003-0963 
Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-17T05:00:00.000Z
CVE-2003-0965 
Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-01-15T05:00:00.000Z
CVE-2003-0966 
Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code via a long Subject line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2003-0967 
rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-02T05:00:00.000Z
CVE-2003-0968 
Stack-based buffer overflow in SMB_Logon_Server of the rlm_smb experimental module for FreeRADIUS 0.9.3 and earlier allows remote attackers to execute arbitrary code via a long User-Password attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-02T05:00:00.000Z
CVE-2003-0969 
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2003-0970 
The Network Management Port on Sun Fire B1600 systems allows remote attackers to cause a denial of service (packet loss) via ARP packets, which cause all ports to become temporarily disabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-02T05:00:00.000Z
CVE-2003-0971 
GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-02T05:00:00.000Z
CVE-2003-0972 
Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-02T05:00:00.000Z
CVE-2003-0973 
Unknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service (httpd crash) via a certain query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-02T05:00:00.000Z
CVE-2003-0974 
Applied Watch Command Center allows remote attackers to conduct unauthorized activities without authentication, such as (1) add new users to a console, as demonstrated using appliedsnatch.c, or (2) add spurious IDS rules to sensors, as demonstrated using addrule.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-02T05:00:00.000Z
CVE-2003-0975 
Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-10T05:00:00.000Z
CVE-2003-0976 
NFS Server (XNFS.NLM) for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could allow users to mount file systems when XNFS should deny the host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-10T05:00:00.000Z
CVE-2003-0977 
CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-10T05:00:00.000Z
CVE-2003-0978 
Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious keyserver to cause a denial of service (crash) and possibly execute arbitrary code during key retrieval.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-10T05:00:00.000Z
CVE-2003-0979 
FreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which allows remote attackers to (1) use VisitorBook as an open mail relay, when $mailuser is 1, via extra headers in the email field, or (2) cause the guestbook database to be deleted via a large number of line breaks that exceeds the $max_posts variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-11T05:00:00.000Z
CVE-2003-0980 
Cross-site scripting (XSS) vulnerability in FreeScripts VisitorBook LE (visitorbook.pl) allows remote attackers to inject arbitrary HTML or web script via (1) the "do" parameter, (2) via the "user" parameter from a host with a malicious reverse DNS name, (3) via quote marks or ampersands in other parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-11T05:00:00.000Z
CVE-2003-0981 
FreeScripts VisitorBook LE (visitorbook.pl) logs the reverse DNS name of a visiting host, which allows remote attackers to spoof the origin of their incoming requests and facilitate cross-site scripting (XSS) attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-11T05:00:00.000Z
CVE-2003-0982 
Buffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11, and 5.x before 5.0.5, allows remote attackers to execute arbitrary code via a long password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-11T05:00:00.000Z
CVE-2003-0983 
Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, which allows local or remote attackers to conduct unauthorized activities via (1) a "bubba" local user account, (2) an open TCP port 34571, or (3) when a local DHCP server is unavailable, a DHCP server on the manufacturer's test network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-11T05:00:00.000Z
CVE-2003-0984 
Real time clock (RTC) routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-23T05:00:00.000Z
CVE-2003-0985 
The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2003-0986 
Various routines for the ppc64 architecture on Linux kernel 2.6 prior to 2.6.2 and 2.4 prior to 2.4.24 do not use the copy_from_user function when copying data from userspace to kernelspace, which crosses security boundaries and allows local users to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-02-27T23:00:00.000Z
CVE-2003-0987 
mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-02-03T05:00:00.000Z
CVE-2003-0988 
Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in KDE 3.1.0 through 3.1.4 allows attackers to execute arbitrary code via a VCF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2003-0989 
tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-01-15T05:00:00.000Z
CVE-2003-0990 
The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the "To:" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-01-06T05:00:00.000Z
CVE-2003-0991 
Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of service (crash) via malformed e-mail commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2003-0992 
Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-01-15T05:00:00.000Z
CVE-2003-0993 
mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2003-0994 
The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain SYSTEM privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2003-0995 
Buffer overflow in the Microsoft Message Queue Manager (MSQM) allows remote attackers to cause a denial of service (RPC service crash) via a queue registration request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-17T05:00:00.000Z
CVE-2003-0996 
Unknown "System Security Vulnerability" in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 allows attackers to gain privileges via the help interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-17T05:00:00.000Z
CVE-2003-0997 
Unknown "Denial of Service Attack" vulnerability in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 allows attackers to cause a denial of service (CPU consumption in URC host service).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-17T05:00:00.000Z
CVE-2003-0998 
Unknown "potential system security vulnerability" in Computer Associates (CA) Unicenter Remote Control 5.0 through 5.2, and ControlIT 5.0 and 5.1, may allow attackers to gain privileges to the local system account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-17T05:00:00.000Z
CVE-2003-0999 
Unknown multiple vulnerabilities in (1) lpstat and (2) the libprint library in Solaris 2.6 through 9 may allow attackers to execute arbitrary code or read or write arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-17T05:00:00.000Z
CVE-2003-1000 
xchat 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an invalid ID number, which causes a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-17T05:00:00.000Z
CVE-2003-1001 
Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth requests for (1) TACACS+ or (2) RADIUS authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-17T05:00:00.000Z
CVE-2003-1002 
Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is set.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-17T05:00:00.000Z
CVE-2003-1003 
Cisco PIX firewall 5.x.x, and 6.3.1 and earlier, allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is set.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-17T05:00:00.000Z
CVE-2003-1004 
Cisco PIX firewall 6.2.x through 6.2.3, when configured as a VPN Client, allows remote attackers to cause a denial of service (dropped IPSec tunnel connection) via an IKE Phase I negotiation request to the outside interface of the firewall.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-17T05:00:00.000Z
CVE-2003-1005 
The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (service crash) via malformed ASN.1 sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-14T04:00:00.000Z
CVE-2003-1006 
Buffer overflow in cd9660.util in Apple Mac OS X 10.0 through 10.3.2 and Apple Mac OS X Server 10.0 through 10.3.2 may allow local users to execute arbitrary code via a long command line parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-10T05:00:00.000Z
CVE-2003-1007 
AppleFileServer (AFS) in Apple Mac OS X 10.2.8 and 10.3.2 does not properly handle certain malformed requests, with unknown impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-10T05:00:00.000Z
CVE-2003-1008 
Unknown vulnerability in Mac OS X 10.2.8 and 10.3.2 allows local users to bypass the screen saver login window and write a text clipping to the desktop or another application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-10T05:00:00.000Z
CVE-2003-1009 
Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remote attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-10T05:00:00.000Z
CVE-2003-1010 
Unknown vulnerability in fs_usage in Mac OS X 10.2.8 and 10.3.2 and Mac OS X Server 10.2.8 and 10.3.2 allows local users to gain privileges via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-10T05:00:00.000Z
CVE-2003-1011 
Apple Mac OS X 10.0 through 10.2.8 allows local users with a USB keyboard to gain unauthorized access by holding down the CTRL and C keys when the system is booting, which crashes the init process and leaves the user in a root shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-10T05:00:00.000Z
CVE-2003-1012 
The SMB dissector in Ethereal before 0.10.0 allows remote attackers to cause a denial of service via a malformed SMB packet that triggers a segmentation fault during processing of Selected packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-17T05:00:00.000Z
CVE-2003-1013 
The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q.931, which triggers a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-17T05:00:00.000Z
CVE-2003-1014 
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use multiple MIME fields with the same name, which may be interpreted differently by mail clients.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-24T04:00:00.000Z
CVE-2003-1015 
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which may be interpreted differently by mail clients.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-24T04:00:00.000Z
CVE-2003-1016 
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers, parameters, and values, including (1) fields that should not be quoted, (2) duplicate quotes, or (3) missing leading or trailing quote characters, which may be interpreted differently by mail clients.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-24T04:00:00.000Z
CVE-2003-1017 
Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-17T05:00:00.000Z
CVE-2003-1018 
Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-10T05:00:00.000Z
CVE-2003-1020 
The format_send_to_gui function in formats.c for irssi before 0.8.9 allows remote IRC users to cause a denial of service (crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-23T05:00:00.000Z
CVE-2003-1021 
The scosession program in OpenServer 5.0.6 and 5.0.7 allows local users to gain privileges via crafted strings on the commandline.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-06T05:00:00.000Z
CVE-2003-1022 
Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2003-1023 
Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-01-06T05:00:00.000Z
CVE-2003-1024 
Unknown vulnerability in the ls-F builtin function in tcsh on Solaris 8 allows local users to create or delete files as other users, and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-01-06T05:00:00.000Z
CVE-2003-1025 
Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-01-06T05:00:00.000Z