rainbutterfly/cve_corpus huggingface dataset:
CVE-2003-0775 
saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service (memory consumption or crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-12T04:00:00.000Z
CVE-2003-0776 
saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-12T04:00:00.000Z
CVE-2003-0777 
saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service (segmentation fault).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-12T04:00:00.000Z
CVE-2003-0778 
saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow attackers to cause a denial of service (memory consumption).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-12T04:00:00.000Z
CVE-2003-0779 
SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-12T04:00:00.000Z
CVE-2003-0780 
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-12T04:00:00.000Z
CVE-2003-0781 
Unknown vulnerability in ecartis before 1.0.0 does not properly validate user input, which allows attackers to obtain mailing list passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-25T05:00:00.000Z
CVE-2003-0782 
Multiple buffer overflows in ecartis before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-25T05:00:00.000Z
CVE-2003-0783 
Multiple buffer overflows in hztty 2.0 allow local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-23T04:00:00.000Z
CVE-2003-0784 
Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that contains format string specifiers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-23T04:00:00.000Z
CVE-2003-0785 
ipmasq before 3.5.12, in certain configurations, may forward packets to the external interface even if the packets are not associated with an established connection, which could allow remote attackers to bypass intended filtering.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-23T04:00:00.000Z
CVE-2003-0786 
The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-25T04:00:00.000Z
CVE-2003-0787 
The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-25T04:00:00.000Z
CVE-2003-0788 
Unknown vulnerability in the Internet Printing Protocol (IPP) implementation in CUPS before 1.1.19 allows remote attackers to cause a denial of service (CPU consumption from a "busy loop") via certain inputs to the IPP port (TCP 631).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-11-06T05:00:00.000Z
CVE-2003-0789 
mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could cause Apache to send the output of a CGI program to the wrong client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-30T05:00:00.000Z
CVE-2003-0791 
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-14T04:00:00.000Z
CVE-2003-0792 
Fetchmail 6.2.4 and earlier does not properly allocate memory for long lines, which allows remote attackers to cause a denial of service (crash) via a certain email.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-21T04:00:00.000Z
CVE-2003-0793 
GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not restrict the size of input, which allows attackers to cause a denial of service (memory consumption).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-21T04:00:00.000Z
CVE-2003-0794 
GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not limit the number or duration of commands and uses a blocking socket connection, which allows attackers to cause a denial of service (resource exhaustion) by sending commands and not reading the results.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-21T04:00:00.000Z
CVE-2003-0795 
The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) via a malformed telnet command to the telnet CLI port, which may trigger a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-11-18T05:00:00.000Z
CVE-2003-0796 
Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through 6.5.22 allows remote attackers to mount from unprivileged ports even with the -n option disabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-10T05:00:00.000Z
CVE-2003-0797 
Unknown vulnerability in rpc.mountd in SGI IRIX 6.5 through 6.5.22 allows remote attackers to cause a denial of service (process death) via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-10T05:00:00.000Z
CVE-2003-0801 
Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute arbitrary web script and steal cookies via a URL to the docs/ directory that contains the script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-18T04:00:00.000Z
CVE-2003-0802 
Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root, and the physical path of the NED server, via a "retrieve" action with a location parameter of . (dot).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-18T04:00:00.000Z
CVE-2003-0803 
Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-18T04:00:00.000Z
CVE-2003-0804 
The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-25T04:00:00.000Z
CVE-2003-0805 
Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command, and (2) the GSisText function, which calculates the view-type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-19T04:00:00.000Z
CVE-2003-0806 
Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of a domain, allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-16T04:00:00.000Z
CVE-2003-0807 
Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-16T04:00:00.000Z
CVE-2003-0809 
Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows remote attackers to execute arbitrary code via an HTML e-mail message or web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-08T04:00:00.000Z
CVE-2003-0812 
Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-11-18T05:00:00.000Z
CVE-2003-0813 
A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-15T04:00:00.000Z
CVE-2003-0814 
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-01-14T05:00:00.000Z
CVE-2003-0815 
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-01-14T05:00:00.000Z
CVE-2003-0816 
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-01-14T05:00:00.000Z
CVE-2003-0817 
Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-01-14T05:00:00.000Z
CVE-2003-0818 
Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-02-11T05:00:00.000Z
CVE-2003-0819 
Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-01-15T05:00:00.000Z
CVE-2003-0820 
Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-11-18T05:00:00.000Z
CVE-2003-0821 
Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-11-18T05:00:00.000Z
CVE-2003-0822 
Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-11-18T05:00:00.000Z
CVE-2003-0823 
Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a different vulnerability than CVE-2003-1027.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-01-14T05:00:00.000Z
CVE-2003-0824 
Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service (response failure) via a certain request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-11-18T05:00:00.000Z
CVE-2003-0825 
The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2003-0826 
lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-23T04:00:00.000Z
CVE-2003-0827 
The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service (crash) via a long packet to UDP port 523.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-23T04:00:00.000Z
CVE-2003-0828 
Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain "games" group privileges when processing environment variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-10T05:00:00.000Z
CVE-2003-0830 
Buffer overflow in marbles 1.0.2 and earlier allows local users to gain privileges via a long HOME environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-01T04:00:00.000Z
CVE-2003-0831 
ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-25T04:00:00.000Z
CVE-2003-0832 
Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a Hostname header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-01T04:00:00.000Z
CVE-2003-0833 
Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by creating directories that result in a long pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-01T04:00:00.000Z
CVE-2003-0834 
Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-11-06T05:00:00.000Z
CVE-2003-0835 
Multiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to execute arbitrary code via an ASX header with a long hostname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-01T04:00:00.000Z
CVE-2003-0836 
Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with "Connect" privileges to execute arbitrary code via a LOAD command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-08T04:00:00.000Z
CVE-2003-0837 
Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a, allows attackers with "Connect" privileges to execute arbitrary code via the INVOKE command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-08T04:00:00.000Z
CVE-2003-0838 
Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but later executes as an HTA application, a different vulnerability than CVE-2003-0532, and as exploited using the QHosts Trojan horse (aka Trojan.Qhosts, QHosts-1, VBS.QHOSTS, or aolfix.exe).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-07T04:00:00.000Z
CVE-2003-0839 
Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a "shell:" link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-09T04:00:00.000Z
CVE-2003-0840 
Buffer overflow in dtprintinfo on HP-UX 11.00, and possibly other operating systems, allows local users to gain root privileges via a long DISPLAY environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-09T04:00:00.000Z
CVE-2003-0841 
The grid option in PeopleSoft 8.42 stores temporary .xls files in guessable directories under the web document root, which allows remote attackers to steal search results by directly accessing the files via a URL request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-09T04:00:00.000Z
CVE-2003-0842 
Stack-based buffer overflow in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode, allows remote attackers to execute arbitrary code via a long filename in a GET request with an "Accept-Encoding: gzip" header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-09T04:00:00.000Z
CVE-2003-0843 
Format string vulnerability in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode and using the Apache log, allows remote attackers to execute arbitrary code via format string characters in an HTTP GET request with an "Accept-Encoding: gzip" header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-09T04:00:00.000Z
CVE-2003-0844 
mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode without the Apache log, allows local users to overwrite arbitrary files via (1) a symlink attack on predictable temporary filenames on Unix systems, or (2) an NTFS hard link on Windows systems when the "Strengthen default permissions of internal system objects" policy is not enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-09T04:00:00.000Z
CVE-2003-0845 
Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct unauthorized activities and possibly execute arbitrary code via certain SQL statements to (1) TCP port 1701 in JBoss 3.2.1, and (2) port 1476 in JBoss 3.0.8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-09T04:00:00.000Z
CVE-2003-0846 
SuSEconfig.javarunt in the javarunt package on SuSE Linux 7.3Pro allows local users to overwrite arbitrary files via a symlink attack on the .java_wrapper temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-09T04:00:00.000Z
CVE-2003-0847 
SuSEconfig.susewm in the susewm package on SuSE Linux 8.2Pro allows local users to overwrite arbitrary files via a symlink attack on the susewm.$$ temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-09T04:00:00.000Z
CVE-2003-0848 
Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-09T04:00:00.000Z
CVE-2003-0849 
Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-09T04:00:00.000Z