rainbutterfly/cve_corpus huggingface dataset:
CVE-2003-0233 
Heap-based buffer overflow in plugin.ocx for Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via the Load() method, a different vulnerability than CVE-2003-0115.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-02T04:00:00.000Z
CVE-2003-0235 
Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-07T04:00:00.000Z
CVE-2003-0236 
Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subject or (2) Date headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-07T04:00:00.000Z
CVE-2003-0237 
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-07T04:00:00.000Z
CVE-2003-0238 
The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CPU consumption) by spoofing the address of an ADS server and sending HTML with a -1 width in a table tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-07T04:00:00.000Z
CVE-2003-0239 
icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF89a headers that do not contain a GCT (Global Color Table) or an LCT (Local Color Table) after an Image Descriptor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-07T04:00:00.000Z
CVE-2003-0240 
The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2003-0241 
FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it untrusted, which allows remote attackers to execute arbitrary code via a message that is rendered in IE using a less secure zone.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2003-0242 
IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which could allow traffic that is not explicitly allowed by the policies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-17T04:00:00.000Z
CVE-2003-0243 
Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter for the (1) normal_html.cgi or (2) member_html.cgi scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-09T04:00:00.000Z
CVE-2003-0244 
The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service (CPU consumption) via packets with forged source addresses that cause a large number of hash table collisions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-08T04:00:00.000Z
CVE-2003-0245 
Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long strings, as demonstrated using XML objects to mod_dav, and possibly other vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2003-0246 
The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-15T04:00:00.000Z
CVE-2003-0247 
Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service ("kernel oops").
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-05T04:00:00.000Z
CVE-2003-0248 
The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-05T04:00:00.000Z
CVE-2003-0249 
PHP treats unknown methods such as "PoSt" as a GET request, which could allow attackers to intended access restrictions if PHP is running on a server that passes on all methods, such as Apache httpd 2.0, as demonstrated using a Limit directive.  NOTE: this issue has been disputed by the Apache security team, saying "It is by design that PHP allows scripts to process any request method.  A script which does not explicitly verify the request method will hence be processed as normal for arbitrary methods.  It is therefore expected behaviour that one cannot implement per-method access control using the Apache configuration alone, which is the assumption made in this report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-02-27T23:00:00.000Z
CVE-2003-0251 
ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the server, which causes ypserv to block.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0252 
Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-15T04:00:00.000Z
CVE-2003-0253 
The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-10T04:00:00.000Z
CVE-2003-0254 
Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service (CPU consumption by infinite loop) when the FTP proxy server fails to create an IPv6 socket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-10T04:00:00.000Z
CVE-2003-0255 
The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, which prevents GnuPG from warning the encrypting user when a user ID does not have a trusted path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-07T04:00:00.000Z
CVE-2003-0256 
The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows remote attackers to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-09T04:00:00.000Z
CVE-2003-0257 
Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-16T05:00:00.000Z
CVE-2003-0258 
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-08T04:00:00.000Z
CVE-2003-0259 
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7 allows remote attackers to cause a denial of service (reload) via a malformed SSH initialization packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-08T04:00:00.000Z
CVE-2003-0260 
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service (slowdown and possibly reload) via a flood of malformed ICMP packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-08T04:00:00.000Z
CVE-2003-0261 
fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-08T04:00:00.000Z
CVE-2003-0262 
leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges, which KATAXWR is not designed to have.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-08T04:00:00.000Z
CVE-2003-0263 
Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) 1.22 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-08T04:00:00.000Z
CVE-2003-0264 
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-08T04:00:00.000Z
CVE-2003-0265 
Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-08T04:00:00.000Z
CVE-2003-0266 
Multiple buffer overflows in SLWebMail 3 on Windows systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long Language parameter to showlogin.dll, (2) a long CompanyID parameter to recman.dll, (3) a long CompanyID parameter to admin.dll, or (4) a long CompanyID parameter to globallogin.dll.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-08T04:00:00.000Z
CVE-2003-0267 
ShowGodLog.dll in SLWebMail 3 on Windows systems allows remote attackers to read arbitrary files by directly calling ShowGodLog.dll with an argument specifying the full path of the target file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-08T04:00:00.000Z
CVE-2003-0268 
SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which reveals the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-08T04:00:00.000Z
CVE-2003-0269 
Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-08T04:00:00.000Z
CVE-2003-0270 
The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet or non-WEP connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0271 
Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-09T04:00:00.000Z
CVE-2003-0272 
admin.php in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cookie to an "adminok" value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-09T04:00:00.000Z
CVE-2003-0273 
Cross-site scripting (XSS) vulnerability in the web interface for Request Tracker (RT) 1.0 through 1.0.7 allows remote attackers to execute script via message bodies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-09T04:00:00.000Z
CVE-2003-0274 
Buffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute arbitrary code via a long ULISTPROC_UMASK value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-09T04:00:00.000Z
CVE-2003-0275 
SSI.php in YaBB SE 1.5.2 allows remote attackers to execute arbitrary PHP code by modifying the sourcedir parameter to reference a URL on a remote web server that contains the code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0276 
Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GET request with a large number of / characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0277 
Directory traversal vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0278 
Cross-site scripting (XSS) vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to insert arbitrary web script via the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0279 
Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5 allows remote attackers to steal sensitive information via numeric fields, as demonstrated using (1) the viewlink function and cid parameter, or (2) index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0280 
Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0281 
Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_inet_server, (2) gds_lock_mgr, or (3) gds_drop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0282 
Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0283 
Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject arbitrary web script and HTML tags via a message with a "<<" before a tag name in the (1) subject, (2) author's name, or (3) author's e-mail.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0284 
Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the Plug-ins folder that spread to other PDF documents, as demonstrated by the W32.Yourde virus.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0285 
IBM AIX 5.2 and earlier distributes Sendmail with a configuration file (sendmail.cf) with the (1) promiscuous_relay, (2) accept_unresolvable_domains, and (3) accept_unqualified_senders features enabled, which allows Sendmail to be used as an open mail relay for sending spam e-mail.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0286 
SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0287 
Cross-site scripting (XSS) vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via the Name textbox, possibly when the "Allow HTML in comments?" option is enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0288 
Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0289 
Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0290 
Memory leak in eServ 2.9x allows remote attackers to cause a denial of service (memory exhaustion) via a large number of connections, whose memory is not freed when the connection is terminated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-14T04:00:00.000Z
CVE-2003-0291 
3com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP responses, which allows remote attackers to identify the contents of previous HTTP requests by sniffing DHCP packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-15T04:00:00.000Z
CVE-2003-0292 
Cross-site scripting (XSS) vulnerability in Inktomi Traffic-Server 5.5.1 allows remote attackers to insert arbitrary web script or HTML into an error page that appears to come from the domain that the client is visiting, aka "Man-in-the-Middle" XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-15T04:00:00.000Z
CVE-2003-0293 
PalmOS allows remote attackers to cause a denial of service (CPU consumption) via a flood of ICMP echo request (ping) packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-15T04:00:00.000Z
CVE-2003-0294 
autohtml.php in php-proxima 6.0 and earlier allows remote attackers to read arbitrary files via the name parameter in a modload operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-15T04:00:00.000Z
CVE-2003-0295 
Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-15T04:00:00.000Z
CVE-2003-0296 
The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-15T04:00:00.000Z
CVE-2003-0297 
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-15T04:00:00.000Z
CVE-2003-0298 
The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large (1) literal and possibly (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-15T04:00:00.000Z
CVE-2003-0299 
The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large mailbox size values that cause either integer signedness errors or integer overflow errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-15T04:00:00.000Z
CVE-2003-0300 
The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-15T04:00:00.000Z
CVE-2003-0301 
The IMAP Client for Outlook Express 6.00.2800.1106 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-15T04:00:00.000Z
CVE-2003-0302 
The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-15T04:00:00.000Z
CVE-2003-0303 
SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-17T04:00:00.000Z
CVE-2003-0304 
one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-17T04:00:00.000Z
CVE-2003-0305 
The Service Assurance Agent (SAA) in Cisco IOS 12.0 through 12.2, aka Response Time Reporter (RTR), allows remote attackers to cause a denial of service (crash) via malformed RTR packets to port 1967.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-17T04:00:00.000Z