rainbutterfly/cve_corpus huggingface dataset:
CVE-2003-0462 
A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-25T04:00:00.000Z
CVE-2003-0464 
The RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow local users to bind to UDP ports that are used by privileged services such as nfsd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-25T04:00:00.000Z
CVE-2003-0465 
The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-15T04:00:00.000Z
CVE-2003-0466 
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-08-01T04:00:00.000Z
CVE-2003-0467 
Unknown vulnerability in ip_nat_sack_adjust of Netfilter in Linux kernels 2.4.20, and some 2.5.x, when CONFIG_IP_NF_NAT_FTP or CONFIG_IP_NF_NAT_IRC is enabled, or the ip_nat_ftp or ip_nat_irc modules are loaded, allows remote attackers to cause a denial of service (crash) in systems using NAT, possibly due to an integer signedness error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-08-05T04:00:00.000Z
CVE-2003-0468 
Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate with the target on the associated port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-08-05T04:00:00.000Z
CVE-2003-0469 
Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align" argument in an HR tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0470 
Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0471 
Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a long USER argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0472 
The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service (hang) in inetd via port scanning.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0473 
Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0474 
Directory traversal vulnerability in iWeb Server allows remote attackers to read arbitrary files via an HTTP request containing .. sequences, a different vulnerability than CVE-2003-0475.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0475 
Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request containing URL-encoded .. sequences ("%5c%2e%2e"), a different vulnerability than CVE-2003-0474.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0476 
The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0477 
wzdftpd 0.1rc4 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command without an argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0478 
Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) methane 0.1.1, (4) AndromedeIRCd 1.2.3-Release, and (5) ircd-RU, when running in debug mode, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request containing format strings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0479 
Cross-site scripting (XSS) vulnerability in the guestbook for WebBBS allows remote attackers to insert arbitrary web script via the (1) Name, (2) Email, or (3) Message fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0480 
VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipulation."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0481 
Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated using the msg parameter to file_select.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0482 
TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly accessing the uploaded code via a request to the repository containing the code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0483 
Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via (1) the member parameter to member.php or (2) the action parameter to buddy.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0484 
Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the topic_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0485 
Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, invalid data type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0486 
SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0487 
Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parameter in the do_subscribe module, (2) a long folder parameter in the add_acl module, (3) a long folder parameter in the list module, and (4) a long user parameter in the do_map module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0488 
Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1) the add_name parameter in the add_acl module, or (2) the alias parameter in the do_map module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0489 
tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0490 
The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical directories and files with world-writable permissions, which allows local users to gain privileges as other users by replacing programs with malicious code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0491 
The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0492 
Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web script via the Search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0493 
Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after obtaining a valid session ID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0494 
password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modified member id.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0495 
Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-28T04:00:00.000Z
CVE-2003-0496 
Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-10T04:00:00.000Z
CVE-2003-0497 
Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-04T04:00:00.000Z
CVE-2003-0498 
Caché Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows local users to execute arbitrary code by adding server-side scripts that are executed with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-04T04:00:00.000Z
CVE-2003-0499 
Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-04T04:00:00.000Z
CVE-2003-0500 
SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-04T04:00:00.000Z
CVE-2003-0501 
The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-04T04:00:00.000Z
CVE-2003-0502 
Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0421.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-25T04:00:00.000Z
CVE-2003-0503 
Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service or execute arbitrary code via a long third argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-04T04:00:00.000Z
CVE-2003-0504 
Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware 0.9.14.003 (aka webdistro) allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to index.php in the addressbook module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-04T04:00:00.000Z
CVE-2003-0505 
Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (dot dot) sequences in a file transfer request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-04T04:00:00.000Z
CVE-2003-0506 
Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malformed packets, as demonstrated via the chat conversation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-04T04:00:00.000Z
CVE-2003-0507 
Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service (reboot) and possibly execute arbitrary code via an LDAP version 3 search request with a large number of (1) "AND," (2) "OR," and possibly other statements, which causes LSASS.EXE to crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-04T04:00:00.000Z
CVE-2003-0508 
Buffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader (acroread) 5.0.7 and earlier allows remote attackers to execute arbitrary code via a .pdf file with a long mailto link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-04T04:00:00.000Z
CVE-2003-0509 
SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-04T04:00:00.000Z
CVE-2003-0510 
Format string vulnerability in ezbounce 1.0 through 1.50 allows remote attackers to execute arbitrary code via the "sessions" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-04T04:00:00.000Z
CVE-2003-0511 
The web server for Cisco Aironet AP1x00 Series Wireless devices running certain versions of IOS 12.2 allow remote attackers to cause a denial of service (reload) via a malformed URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-29T04:00:00.000Z
CVE-2003-0512 
Cisco IOS 12.2 and earlier generates a "% Login invalid" message instead of prompting for a password when an invalid username is provided, which allows remote attackers to identify valid usernames on the system and conduct brute force password guessing, as reported for the Aironet Bridge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-29T04:00:00.000Z
CVE-2003-0513 
Microsoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Internet Explorer to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-16T05:00:00.000Z
CVE-2003-0514 
Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Safari to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-16T05:00:00.000Z
CVE-2003-0515 
SQL injection vulnerabilities in the (1) PostgreSQL or (2) MySQL authentication modules for teapop 0.3.5 and earlier allow attackers to execute arbitrary SQL and possibly gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-10T04:00:00.000Z
CVE-2003-0516 
cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in (1) caller ID or (2) caller name strings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-10T04:00:00.000Z
CVE-2003-0517 
faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-10T04:00:00.000Z
CVE-2003-0518 
The screen saver in MacOS X allows users with physical access to cause the screen saver to crash and gain access to the underlying session via a large number of characters in the password field, possibly triggering a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-10T04:00:00.000Z
CVE-2003-0519 
Certain versions of Internet Explorer 5 and 6, in certain Windows environments, allow remote attackers to cause a denial of service (freeze) via a URL to C:\aux (MS-DOS device name) and possibly other devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-10T04:00:00.000Z
CVE-2003-0520 
Trillian 1.0 Pro and 0.74 Freeware allows remote attackers to cause a denial of service (crash) via a TypingUser message in which the "TypingUser" string has been modified.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-10T04:00:00.000Z
CVE-2003-0521 
Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via script in a URL that is logged but not properly quoted when displayed via the (1) Error Log or (2) Latest Visitors screens.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-10T04:00:00.000Z
CVE-2003-0522 
Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via the idadmin parameter to login.asp or (2) gain other privileges via the Email parameter to Custva.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-10T04:00:00.000Z
CVE-2003-0523 
Cross-site scripting (XSS) vulnerability in msg.asp for certain versions of ProductCart allow remote attackers to execute arbitrary web script via the message parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-10T04:00:00.000Z
CVE-2003-0524 
Qt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on the qt_plugins_3.0rc temporary file in the .qt directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-10T04:00:00.000Z
CVE-2003-0525 
The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service (crash) via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string to the java.io.getCanonicalPath Java method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-25T04:00:00.000Z
CVE-2003-0526 
Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages (1) 500.htm for "500 Internal Server error" or (2) 404.htm for "404 Not Found."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-07-17T04:00:00.000Z
CVE-2003-0528 
Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0715.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-12T04:00:00.000Z
CVE-2003-0530 
Buffer overflow in the BR549.DLL ActiveX control for Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-08-22T04:00:00.000Z
CVE-2003-0531 
Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer domain using the browser cache via crafted Content-Type and Content-Disposition headers, aka the "Browser Cache Script Execution in My Computer Zone" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-08-22T04:00:00.000Z
CVE-2003-0532 
Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, which could allow remote attackers to execute arbitrary code via an object tag with a data parameter to a malicious file hosted on a server that returns an unsafe Content-Type, aka the "Object Type" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-08-22T04:00:00.000Z
CVE-2003-0533 
Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via a packet that causes the DsRolerUpgradeDownlevelServer function to create long debug entries for the DCPROMO.LOG log file, as exploited by the Sasser worm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-04-16T04:00:00.000Z