rainbutterfly/cve_corpus huggingface dataset:
CVE-2003-0306 
Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.ini file with a long .ShellClassInfo parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-17T04:00:00.000Z
CVE-2003-0307 
Poster version.two allows remote authenticated users to gain administrative privileges by appending the "|" field separator and an "admin" value into the email address field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-17T04:00:00.000Z
CVE-2003-0308 
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-17T04:00:00.000Z
CVE-2003-0309 
Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which eventually cause Internet Explorer to execute the program, as demonstrated using a large number of FRAME or IFRAME tags, aka the "File Download Dialog Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-17T04:00:00.000Z
CVE-2003-0310 
Cross-site scripting (XSS) vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-17T04:00:00.000Z
CVE-2003-0312 
Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-17T04:00:00.000Z
CVE-2003-0313 
Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to list arbitrary directory contents via a ... (triple dot) in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-17T04:00:00.000Z
CVE-2003-0314 
Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) via a URL that ends in a "</" sequence.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-17T04:00:00.000Z
CVE-2003-0315 
Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP request, which may trigger a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-17T04:00:00.000Z
CVE-2003-0316 
Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for various protocols, including an open relay for SMTP, which allows it to be abused by spammers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-17T04:00:00.000Z
CVE-2003-0317 
iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-23T04:00:00.000Z
CVE-2003-0318 
Cross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier allows remote attackers to insert arbitrary web script via the year parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-22T04:00:00.000Z
CVE-2003-0319 
Buffer overflow in the IMAP server (IMAPMax) for SmartMax MailMax 5.0.10.8 and earlier allows remote authenticated users to execute arbitrary code via a long SELECT command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-22T04:00:00.000Z
CVE-2003-0320 
header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms_user_admin parameter to "1" and modifying the admin_root parameter to point to a URL that contains a Trojan horse header.inc.php script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-22T04:00:00.000Z
CVE-2003-0321 
Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions (1) send_ctcp, (2) cannot_join_channel, (3) cluster, (4) BX_compress_modes, (5) handle_oper_vision, and (6) ban_it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-22T04:00:00.000Z
CVE-2003-0322 
Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service (crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-22T04:00:00.000Z
CVE-2003-0323 
Multiple buffer overflows in ircII 20020912 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via responses that are not properly fed to the my_strcat function by (1) ctcp_buffer, (2) cannot_join_channel, (3) status_make_printable for Statusbar drawing, (4) create_server_list, and possibly other functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-22T04:00:00.000Z
CVE-2003-0324 
Buffer overflows in EPIC IRC Client (EPIC4) 1.0.1 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long replies that are not properly handled by the (1) userhost_cmd_returned function, or (2) Statusbar capability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-22T04:00:00.000Z
CVE-2003-0325 
Buffer overflow in Maelstrom 3.0.6, 3.0.5, and earlier allows local users to execute arbitrary code via a long -server command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-22T04:00:00.000Z
CVE-2003-0326 
Integer overflow in parse_decode_path() of slocate may allow attackers to execute arbitrary code via a LOCATE_PATH with a large number of ":" (colon) characters, whose count is used in a call to malloc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-22T04:00:00.000Z
CVE-2003-0327 
Sybase Adaptive Server Enterprise (ASE) 12.5 allows remote attackers to cause a denial of service (hang) via a remote password array with an invalid length, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-12-10T05:00:00.000Z
CVE-2003-0328 
EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-22T04:00:00.000Z
CVE-2003-0329 
CesarFTP 0.99g stores user names and passwords in plaintext in the settings.ini file, which could allow local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-22T04:00:00.000Z
CVE-2003-0330 
Buffer overflow in unknown versions of Maelstrom allows local users to execute arbitrary code via a long -player command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-22T04:00:00.000Z
CVE-2003-0331 
SQL injection vulnerability in ttForum allows remote attackers to execute arbitrary SQL and gain ttForum Administrator privileges via the Ignorelist-Textfield argument in the Preferences page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-22T04:00:00.000Z
CVE-2003-0332 
The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a security check, which allows remote attackers to bypass authentication via a filename with a .ats extension instead of a .hts extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-22T04:00:00.000Z
CVE-2003-0333 
Multiple buffer overflows in kermit in HP-UX 10.20 and 11.00 (C-Kermit 6.0.192 and possibly other versions before 8.0) allow local users to gain privileges via long arguments to (1) ask, (2) askq, (3) define, (4) assign, and (5) getc, some of which may share the same underlying function "doask," a different vulnerability than CVE-2001-0085.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-23T04:00:00.000Z
CVE-2003-0334 
BitchX IRC client 1.0c20cvs and earlier allows attackers to cause a denial of service (core dump) via certain channel mode changes that are not properly handled in names.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-23T04:00:00.000Z
CVE-2003-0335 
rc.M in Slackware 9.0 calls quotacheck with the -M option, which causes the filesystem to be remounted and possibly reset security-relevant mount flags such as nosuid, nodev, and noexec.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-23T04:00:00.000Z
CVE-2003-0336 
Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a carriage return (CR) character in a spoofed "Attachment Converted:" string, which is not properly handled by Eudora.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-23T04:00:00.000Z
CVE-2003-0337 
The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute arbitrary programs by modifying the LSF_ENVDIR environment variable to reference an alternate lsf.conf file, then modifying LSF_SERVERDIR to point to a malicious lim program, which lsadmin then executes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-23T04:00:00.000Z
CVE-2003-0338 
Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequences in HTTP GET or POST requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-23T04:00:00.000Z
CVE-2003-0339 
Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HTTP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-23T04:00:00.000Z
CVE-2003-0340 
Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, which allows attackers to steal login names and passwords to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-23T04:00:00.000Z
CVE-2003-0341 
Cross-site scripting (XSS) vulnerability in Owl Intranet Engine 0.71 and earlier allows remote attackers to insert arbitrary script via the Search field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-23T04:00:00.000Z
CVE-2003-0342 
BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, which can allow local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-23T04:00:00.000Z
CVE-2003-0343 
BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid username is entered, which makes it easier for remote attackers to conduct brute force attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-23T04:00:00.000Z
CVE-2003-0344 
Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-06T04:00:00.000Z
CVE-2003-0345 
Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB packet that specifies a smaller buffer length than is required.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-10T04:00:00.000Z
CVE-2003-0346 
Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with (1) large length for a Text or Copyright string, or (2) a large number of tracks, which leads to a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-25T04:00:00.000Z
CVE-2003-0347 
Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-04T04:00:00.000Z
CVE-2003-0348 
A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the local system via HTML script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0349 
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0350 
The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 (ListView) does not properly handle Windows messages, which allows local users to execute arbitrary code via a "Shatter" style message to the Utility Manager that references a user-controlled callback function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-10T04:00:00.000Z
CVE-2003-0352 
Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-17T04:00:00.000Z
CVE-2003-0353 
Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-08-21T04:00:00.000Z
CVE-2003-0354 
Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-05T04:00:00.000Z
CVE-2003-0355 
Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2003-0356 
Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync, (9) SMB, (10) SMPP, and (11) TSP dissectors, which do not properly use the tvb_get_nstringz and tvb_get_nstringz0 functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2003-0357 
Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) Mount and (2) PPP dissectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2003-0358 
Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2003-0359 
nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replacing the original binaries with malicious code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-18T04:00:00.000Z
CVE-2003-0360 
Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2003-0361 
gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2003-0362 
Buffer overflow in gPS before 0.10.2 may allow local users to cause a denial of service (SIGSEGV) in rgpsp via long command lines.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2003-0363 
Format string vulnerability in LICQ 1.2.6, 1.0.3 and possibly other versions allows remote attackers to perform unknown actions via format string specifiers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-15T04:00:00.000Z
CVE-2003-0364 
The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-05T04:00:00.000Z
CVE-2003-0365 
ICQLite 2003a creates the ICQ Lite directory with an ACE for "Full Control" privileges for Interactive Users, which allows local users to gain privileges as other users by replacing the executables with malicious programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-05T04:00:00.000Z
CVE-2003-0366 
lyskom-server 2.0.7 and earlier allows unauthenticated users to cause a denial of service (CPU consumption) via a large query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-18T04:00:00.000Z
CVE-2003-0367 
znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-10T04:00:00.000Z
CVE-2003-0368 
Nokia Gateway GPRS support node (GGSN) allows remote attackers to cause a denial of service (kernel panic) via a malformed IP packet with a 0xFF TCP option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-01-14T05:00:00.000Z
CVE-2003-0370 
Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-05T04:00:00.000Z
CVE-2003-0371 
Buffer overflow in Prishtina FTP client 1.x allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP banner.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-06T04:00:00.000Z
CVE-2003-0372 
Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code by causing a negative argument to be provided to the insstr function as used in a NASL script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-06T04:00:00.000Z
CVE-2003-0373 
Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code via (1) a long proto argument to the scanner_add_port function, (2) a long user argument to the ftp_log_in function, (3) a long pass argument to the ftp_log_in function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-06T04:00:00.000Z
CVE-2003-0374 
Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, a different set of vulnerabilities than those identified by CVE-2003-0372 and CVE-2003-0373, aka "similar issues in other nasl functions as well as in libnessus."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-06T04:00:00.000Z
CVE-2003-0375 
Cross-site scripting (XSS) vulnerability in member.php of XMBforum XMB 1.8.x (aka Partagium) allows remote attackers to insert arbitrary HTML and web script via the "member" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-06T04:00:00.000Z
CVE-2003-0376 
Buffer overflow in Eudora 5.2.1 allows remote attackers to cause a denial of service (crash and failed restart) and possibly execute arbitrary code via an Attachment Converted argument with a large number of . (dot) characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-06T04:00:00.000Z
CVE-2003-0377 
SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versions, allows remote attackers to insert arbitrary SQL and execute code via certain variables, as demonstrated using the GroupName variable in SiteAdmin.ASP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-06T04:00:00.000Z
CVE-2003-0378 
The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-06T04:00:00.000Z
CVE-2003-0379 
Unknown vulnerability in Apple File Service (AFP Server) for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows remote attackers to overwrite arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-18T04:00:00.000Z
CVE-2003-0380 
Buffer overflow in atftp daemon (atftpd) 0.6.1 and earlier, and possibly later versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-10T04:00:00.000Z