rainbutterfly/cve_corpus huggingface dataset:
CVE-2003-0149 
Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-08-01T04:00:00.000Z
CVE-2003-0150 
MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-21T05:00:00.000Z
CVE-2003-0151 
BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that perform administrative functions, which allows remote attackers to read arbitrary files or execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-21T05:00:00.000Z
CVE-2003-0152 
Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-26T05:00:00.000Z
CVE-2003-0153 
bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-26T05:00:00.000Z
CVE-2003-0154 
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-26T05:00:00.000Z
CVE-2003-0155 
bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-26T05:00:00.000Z
CVE-2003-0156 
Directory traversal vulnerability in Cross-Referencing Linux (LXR) allows remote attackers to read arbitrary files via .. (dot dot) sequences in the v parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-21T05:00:00.000Z
CVE-2003-0159 
Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-26T05:00:00.000Z
CVE-2003-0160 
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.2.11 allow remote attackers to inject arbitrary HTML code and steal information from a client's web browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-26T05:00:00.000Z
CVE-2003-0161 
The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-01T05:00:00.000Z
CVE-2003-0162 
Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-26T05:00:00.000Z
CVE-2003-0163 
decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service (crash) via a negative length, which overwrites arbitrary heap memory with a zero byte.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-15T04:00:00.000Z
CVE-2003-0165 
Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-29T05:00:00.000Z
CVE-2003-0166 
Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-27T05:00:00.000Z
CVE-2003-0167 
Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a specially crafted mail folder, a different vulnerability than CVE-2003-0140.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-29T05:00:00.000Z
CVE-2003-0168 
Buffer overflow in Apple QuickTime Player 5.x and 6.0 for Windows allows remote attackers to execute arbitrary code via a long QuickTime URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-01T05:00:00.000Z
CVE-2003-0169 
hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of service (CPU consumption) via a request to hpnst.exe that calls itself, which causes an infinite loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-01T05:00:00.000Z
CVE-2003-0170 
Unknown vulnerability in ftpd in IBM AIX 5.2, when configured to use Kerberos 5 for authentication, allows remote attackers to gain privileges via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-10T05:00:00.000Z
CVE-2003-0171 
DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-15T04:00:00.000Z
CVE-2003-0172 
Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-29T05:00:00.000Z
CVE-2003-0173 
xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-15T04:00:00.000Z
CVE-2003-0174 
The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-29T04:00:00.000Z
CVE-2003-0175 
SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWATCH ioctl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-01-14T05:00:00.000Z
CVE-2003-0176 
The Name Service Daemon (nsd), when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via a UDP port scan.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-08-18T04:00:00.000Z
CVE-2003-0177 
SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause subsequent group membership entries to be processed inadvertently.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-08-18T04:00:00.000Z
CVE-2003-0178 
Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parameter for iNotes, (2) the Foldername option in the PresetFields parameter for iNotes, or (3) a long Host header, which is inserted into a long Location header and used during a redirect operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-29T05:00:00.000Z
CVE-2003-0179 
Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-29T05:00:00.000Z
CVE-2003-0180 
Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the h_PageUI form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-29T05:00:00.000Z
CVE-2003-0181 
Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the s_Validation form with a long, unknown parameter name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-29T05:00:00.000Z
CVE-2003-0187 
The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows remote attackers to cause a denial of service (resource consumption) due to an inconsistency with Linux 2.4.20's support of linked lists, which causes Netfilter to fail to identify connections with an UNCONFIRMED status and use large timeouts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-08-05T04:00:00.000Z
CVE-2003-0188 
lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-17T04:00:00.000Z
CVE-2003-0189 
The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which allows remote attackers to cause a denial of service (failed Basic authentication with valid usernames and passwords) when a threaded MPM is used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2003-0190 
OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-02T00:00:00.000Z
CVE-2003-0192 
Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache to use the weak ciphersuite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-10T04:00:00.000Z
CVE-2003-0193 
msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names ("word$$.html").
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-06-03T04:00:00.000Z
CVE-2003-0194 
tcpdump does not properly drop privileges to the pcap user when starting up.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-17T04:00:00.000Z
CVE-2003-0195 
CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (631), which does not time out.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-05T04:00:00.000Z
CVE-2003-0196 
Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different vulnerability than CVE-2003-0201.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-15T04:00:00.000Z
CVE-2003-0197 
Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-08T04:00:00.000Z
CVE-2003-0198 
Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-15T04:00:00.000Z
CVE-2003-0201 
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-15T04:00:00.000Z
CVE-2003-0202 
The (1) halstead and (2) gather_stats scripts in metrics 1.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-16T05:00:00.000Z
CVE-2003-0203 
Buffer overflow in moxftp 2.2 and earlier allows remote malicious FTP servers to execute arbitrary code via a long FTP banner.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-08T04:00:00.000Z
CVE-2003-0204 
KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or (2) PDF files, related to missing -dPARANOIDSAFER and -dSAFER arguments when using the kghostview Ghostscript viewer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-15T04:00:00.000Z
CVE-2003-0205 
gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-26T04:00:00.000Z
CVE-2003-0206 
gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to cause a denial of service (crash) via (1) link or (2) title elements that contain multiple lines.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-26T04:00:00.000Z
CVE-2003-0207 
ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers to overwrite arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-15T04:00:00.000Z
CVE-2003-0208 
Cross-site scripting (XSS) vulnerability in Macromedia Flash ad user tracking capability allows remote attackers to insert arbitrary Javascript via the clickTAG field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-15T04:00:00.000Z
CVE-2003-0209 
Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-16T04:00:00.000Z
CVE-2003-0210 
Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-26T04:00:00.000Z
CVE-2003-0211 
Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service (memory consumption) via a large number of rejected connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-16T04:00:00.000Z
CVE-2003-0212 
handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes full and sets an array index incorrectly, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-26T04:00:00.000Z
CVE-2003-0213 
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-26T04:00:00.000Z
CVE-2003-0214 
run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-26T04:00:00.000Z
CVE-2003-0215 
SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via the (1) username and (2) password fields, and possibly other fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-26T04:00:00.000Z
CVE-2003-0216 
Unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to the enable mode without a password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-26T04:00:00.000Z
CVE-2003-0217 
Cross-site scripting (XSS) vulnerability in Neoteris Instant Virtual Extranet (IVE) 3.01 and earlier allows remote attackers to insert arbitrary web script and bypass authentication via a certain CGI script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0218 
Buffer overflow in PostMethod() function for Monkey HTTP Daemon (monkeyd) 0.6.1 and earlier allows remote attackers to execute arbitrary code via a POST request with a large body.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-29T04:00:00.000Z
CVE-2003-0219 
Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute administrator commands by sniffing packets from a valid session and replaying them against the remote administration server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-29T04:00:00.000Z
CVE-2003-0220 
Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-29T04:00:00.000Z
CVE-2003-0221 
The (1) dupatch and (2) setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allows local users to overwrite files and possibly gain root privileges via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-29T04:00:00.000Z
CVE-2003-0222 
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-30T04:00:00.000Z
CVE-2003-0223 
Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in Microsoft Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to embed a URL containing script in a redirection message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2003-0224 
Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include (SSI) directive with a long filename, aka "Server Side Include Web Pages Buffer Overrun."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2003-0225 
The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service (memory consumption) with an ASP page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2003-0226 
Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or (2) SEARCH method, which generates an error condition that is not properly handled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2003-0227 
The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute arbitrary code via a certain network request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2003-0228 
Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed in an arbitrary location.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-08T04:00:00.000Z
CVE-2003-0230 
Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-25T04:00:00.000Z
CVE-2003-0231 
Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-25T04:00:00.000Z
CVE-2003-0232 
Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-25T04:00:00.000Z