yahoo-inc/cve-impacts huggingface dataset:
CVE-2003-0794: GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not limit the number or duration of commands and uses a blocking socket connection, which allows attackers to cause a denial of service (resource exhaustion) by sending commands and not reading the results.
Key phrases: denial of service (resource exhaustion), cause a denial of service (resource exhaustion, blocking socket connection
CVE-2003-0795: The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) via a malformed telnet command to the telnet CLI port, which may trigger a null dereference.
Key phrases: denial of service (crash), cause a denial of service (crash), null dereference
CVE-2003-0796: Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through 6.5.22 allows remote attackers to mount from unprivileged ports even with the -n option disabled.
Key phrases: mount from unprivileged ports even with the -n, unknown
CVE-2003-0797: Unknown vulnerability in rpc.mountd in SGI IRIX 6.5 through 6.5.22 allows remote attackers to cause a denial of service (process death) via unknown attack vectors.
Key phrases: denial of service (process death), cause a denial of service (process death, unknown, unknown attack vectors
CVE-2003-0801: Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute arbitrary web script and steal cookies via a URL to the docs/ directory that contains the script.
Key phrases: execute arbitrary web script, execute arbitrary web script and steal cookies via, cross-site scripting (xss)
CVE-2003-0802: Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root, and the physical path of the NED server, via a "retrieve" action with a location parameter of . (dot).
Key phrases: obtain a directory listing of the WebLogic web root
CVE-2003-0803: Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user.
Key phrases: use NED as an open HTTP proxy via, open http proxy
CVE-2003-0804: The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests.
Key phrases: denial of service (resource starvation and panic), cause a denial of service (resource starvation, flood of spoofed arp requests
CVE-2003-0805: Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command, and (2) the GSisText function, which calculates the view-type.
Key phrases: execute arbitrary code, execute arbitrary code via (1) a, buffer overflows
CVE-2003-0806: Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of a domain, allows remote attackers to execute arbitrary code.
Key phrases: execute arbitrary code, buffer overflow
CVE-2003-0807: Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request.
Key phrases: cause a denial of service via a crafted, buffer overflow
CVE-2003-0809: Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows remote attackers to execute arbitrary code via an HTML e-mail message or web page.
Key phrases: execute arbitrary code, execute arbitrary code via an HTML e-
CVE-2003-0812: Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API.
Key phrases: execute arbitrary code, execute arbitrary code via RPC calls that cause, stack-based buffer overflow, long entries, stack based buffer overflow
CVE-2003-0813: A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.
Key phrases: denial of service (crash or reboot), cause a denial of service (crash or, multi-threaded race condition, (blaster nachi)
CVE-2003-0814: Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.
Key phrases: bypass zone restrictions, bypass zone restrictions and execute Javascript by setting, bodyrefreshloadsjpu, execcommand cross domain
CVE-2003-0815: Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.
Key phrases: read arbitrary files, bypass zone restrictions, bypass zone restrictions and read arbitrary files by, findeath
CVE-2003-0816: Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability.
Key phrases: bypass zone restrictions, bypass zone restrictions by (1) using, script urls cross domain
CVE-2003-0817: Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object.
Key phrases: read arbitrary files, bypass zone restrictions, bypass zone restrictions and read arbitrary files via, xml object
CVE-2003-0818: Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.
Key phrases: cause arbitrary heap data, execute arbitrary code via ASN.1 BER encodings with, multiple integer overflows, overwritten, modified bit strings
CVE-2003-0819: Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
Key phrases: execute arbitrary code, execute arbitrary code in the Microsoft Firewall Service, buffer overflow
CVE-2003-0820: Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
Key phrases: execute arbitrary code, execute arbitrary code via a buffer overflow attack
CVE-2003-0821: Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model.
Key phrases: execute arbitrary code, execute arbitrary code via a spreadsheet with a, macro security model
CVE-2003-0822: Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted chunked encoded, buffer overflow
CVE-2003-0823: Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a different vulnerability than CVE-2003-1027.
Key phrases: direct drag and drop behaviors and other mouse, hijackclick
CVE-2003-0824: Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service (response failure) via a certain request.
Key phrases: denial of service (response failure), cause a denial of service (response failure, unknown
CVE-2003-0825: The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute
CVE-2003-0826: lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack.
Key phrases: execute arbitrary code, execute arbitrary code via a heap-based, heap-based buffer overflow, heap based buffer overflow
CVE-2003-0827: The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service (crash) via a long packet to UDP port 523.
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2003-0828: Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain "games" group privileges when processing environment variables.
Key phrases: gain "games" group privileges, gain "games" group privileges when processing, buffer overflow
CVE-2003-0830: Buffer overflow in marbles 1.0.2 and earlier allows local users to gain privileges via a long HOME environment variable.
Key phrases: gain privileges, gain privileges via a long HOME environment variable, buffer overflow
CVE-2003-0831: ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files.
Key phrases: execute arbitrary code, execute arbitrary code via a buffer overflow using
CVE-2003-0832: Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a Hostname header.
Key phrases: read arbitrary files, read arbitrary files via .. (dot dot, directory traversal
CVE-2003-0833: Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by creating directories that result in a long pathname.
Key phrases: execute arbitrary code, execute arbitrary code by creating directories that result, stack-based buffer overflow, long pathname, stack based buffer overflow
CVE-2003-0834: Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.
Key phrases: execute arbitrary code, execute arbitrary code via (1) a, buffer overflow
CVE-2003-0835: Multiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to execute arbitrary code via an ASX header with a long hostname.
Key phrases: execute arbitrary code, execute arbitrary code via an ASX header with, buffer overflows
CVE-2003-0836: Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with "Connect" privileges to execute arbitrary code via a LOAD command.
Key phrases: execute arbitrary code, execute arbitrary code via a LOAD command, stack-based buffer overflow, stack based buffer overflow
CVE-2003-0837: Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a, allows attackers with "Connect" privileges to execute arbitrary code via the INVOKE command.
Key phrases: execute arbitrary code, execute arbitrary code via the INVOKE command, stack-based buffer overflow, stack based buffer overflow
CVE-2003-0838: Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but later executes as an HTA application, a different vulnerability than CVE-2003-0532, and as exploited using the QHosts Trojan horse (aka Trojan.Qhosts, QHosts-1, VBS.QHOSTS, or aolfix.exe).
Key phrases: execute arbitrary programs, bypass zone restrictions, bypass zone restrictions to inject and execute arbitrary
CVE-2003-0839: Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a "shell:" link.
Key phrases: read arbitrary files, read arbitrary files via .. (dot dot, directory traversal
CVE-2003-0840: Buffer overflow in dtprintinfo on HP-UX 11.00, and possibly other operating systems, allows local users to gain root privileges via a long DISPLAY environment variable.
Key phrases: gain root privileges, gain root privileges via a long DISPLAY environment, buffer overflow
CVE-2003-0841: The grid option in PeopleSoft 8.42 stores temporary .xls files in guessable directories under the web document root, which allows remote attackers to steal search results by directly accessing the files via a URL request.
Key phrases: steal search results by directly accessing the files, guessable directories
CVE-2003-0842: Stack-based buffer overflow in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode, allows remote attackers to execute arbitrary code via a long filename in a GET request with an "Accept-Encoding: gzip" header.
Key phrases: execute arbitrary code, execute arbitrary code via a long filename in, stack-based buffer overflow, stack based buffer overflow
CVE-2003-0843: Format string vulnerability in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode and using the Apache log, allows remote attackers to execute arbitrary code via format string characters in an HTTP GET request with an "Accept-Encoding: gzip" header.
Key phrases: execute arbitrary code, execute arbitrary code via format string characters in
CVE-2003-0844: mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode without the Apache log, allows local users to overwrite arbitrary files via (1) a symlink attack on predictable temporary filenames on Unix systems, or (2) an NTFS hard link on Windows systems when the "Strengthen default permissions of internal system objects" policy is not enabled.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via (1) a, symlink, predictable temporary filenames, ntfs hard link
CVE-2003-0845: Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct unauthorized activities and possibly execute arbitrary code via certain SQL statements to (1) TCP port 1701 in JBoss 3.2.1, and (2) port 1476 in JBoss 3.0.8.
Key phrases: execute arbitrary code, conduct unauthorized activities and possibly execute arbitrary code, unknown, sql statements
CVE-2003-0846: SuSEconfig.javarunt in the javarunt package on SuSE Linux 7.3Pro allows local users to overwrite arbitrary files via a symlink attack on the .java_wrapper temporary file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-2003-0847: SuSEconfig.susewm in the susewm package on SuSE Linux 8.2Pro allows local users to overwrite arbitrary files via a symlink attack on the susewm.$$ temporary file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-2003-0848: Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used.
Key phrases: gain privileges, gain privileges via a modified slocate database that, heap-based buffer overflow, heap based buffer overflow
CVE-2003-0849: Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function.
Key phrases: execute arbitrary code, execute arbitrary code via certain packets with modified, buffer overflow
CVE-2003-0850: The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets."
Key phrases: execute arbitrary code, cause "memory corruption" and possibly execute, overlarge tcp packets
CVE-2003-0851: OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.
Key phrases: denial of service (crash via large recursion), cause a denial of service (crash via, malformed sequences
CVE-2003-0852: Format string vulnerability in send_message.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP servers to cause a denial of service (crash) in sylpheed via format strings in an error message.
Key phrases: denial of service (crash), cause a denial of service (crash), format string
CVE-2003-0853: An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
Key phrases: execute arbitrary code, cause a denial of service or execute arbitrary, integer overflow, remotely exploited
CVE-2003-0854: ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.
Key phrases: consume a large amount of memory via a, -w value
CVE-2003-0855: Pan 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news post with a long author email address.
Key phrases: denial of service (crash), cause a denial of service (crash), long author email address
CVE-2003-0856: iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as other users to the kernel netlink interface.
Key phrases: cause a denial of service via spoofed messages, spoofing
CVE-2003-0857: The (1) ipq_read and (2) ipulog_read functions in iptables allow local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.
Key phrases: cause a denial of service by sending spoofed, spoofing
CVE-2003-0858: Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.
Key phrases: cause a denial of service by sending spoofed, spoofing
CVE-2003-0859: The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.
Key phrases: cause a denial of service by sending spoofed, spoofing
CVE-2003-0860: Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors.
Key phrases: buffer overflows, unknown impact
CVE-2003-0861: Integer overflows in (1) base64_encode and (2) the GD library for PHP before 4.3.3 have unknown impact and unknown attack vectors.
Key phrases: integer overflows, unknown impact
CVE-2003-0863: The php_check_safe_mode_include_dir function in fopen_wrappers.c of PHP 4.3.x returns a success value (0) when the safe_mode_include_dir variable is not specified in configuration, which differs from the previous failure value and may allow remote attackers to exploit file include vulnerabilities in PHP applications.
Key phrases: exploit file include vulnerabilities in PHP applications
CVE-2003-0864: Buffer overflow in m_join in channel.c for IRCnet IRCD 2.10.x to 2.10.3p3 allows remote attackers to cause a denial of service.
Key phrases: cause a denial of service, buffer overflow
CVE-2003-0865: Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request.
Key phrases: execute arbitrary code, execute arbitrary code via a long request, heap-based buffer overflow, heap based buffer overflow
CVE-2003-0866: The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.
Key phrases: cause a denial of service via several requests, later requests
CVE-2003-0870: Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name.
Key phrases: execute arbitrary code, execute arbitrary code via an HREF with a, heap-based buffer overflow, heap based buffer overflow
CVE-2003-0871: Unknown vulnerability in QuickTime Java in Mac OS X v10.3 and Mac OS X Server 10.3 allows attackers to gain "unauthorized access to a system."
Key phrases: gain "unauthorized access, gain "unauthorized access to a system, unknown
CVE-2003-0872: Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink attack on temporary files.
Key phrases: overwrite files and conduct other unauthorized activities via, symlink
CVE-2003-0874: Multiple SQL injection vulnerabilities in DeskPRO 1.1.0 and earlier allow remote attackers to insert arbitrary SQL and conduct unauthorized activities via (1) the cat parameter in faq.php, (2) the article parameter in faq.php, (3) the tickedid parameter in view.php, and (4) the Password entry on the logon screen.
Key phrases: insert arbitrary SQL, insert arbitrary SQL and conduct unauthorized activities via, sql injection
CVE-2003-0875: Symbolic link vulnerability in the slpd script slpd.all_init for OpenSLP before 1.0.11 allows local users to overwrite arbitrary files via the route.check temporary file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via the route.check temporary file, symbolic link
CVE-2003-0876: Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have less restrictive permissions than intended.
CVE-2003-0877: Mac OS X before 10.3 with core files enabled allows local users to overwrite arbitrary files and read core files via a symlink attack on core files that are created with predictable names in the /cores directory.
Key phrases: overwrite arbitrary files, overwrite arbitrary files and read core files via, symlink, predictable names, arbitrary file read
CVE-2003-0878: slpd daemon in Mac OS X before 10.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2003-0875.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-2003-0880: Unknown vulnerability in Mac OS X before 10.3 allows local users to access Dock functions from behind Screen Effects when Full Keyboard Access is enabled using the Keyboard pane in System Preferences.
Key phrases: access Dock functions from behind Screen Effects when, unknown
CVE-2003-0881: Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by sniffing the password.
Key phrases: gain privileges, gain privileges by sniffing the password, plaintext authentication
CVE-2003-0882: Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet.
Key phrases: determine the system's uptime via the ID
CVE-2003-0883: The System Preferences capability in Mac OS X before 10.3 allows local users to access secure Preference Panes for a short period after an administrator has authenticated to the system.
Key phrases: access secure Preference Panes for a short period
CVE-2003-0885: Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the (1) apple2, (2) xanalogtv, and (3) pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack
CVE-2003-0886: Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code.
Key phrases: execute arbitrary code, format string
CVE-2003-0887: ez-ipupdate 3.0.11b7 and earlier creates insecure temporary cache files, which allows local users to conduct unauthorized operations via a symlink attack on the ez-ipupdate.cache file.
Key phrases: conduct unauthorized operations via a symlink attack on, insecure temporary cache files
CVE-2003-0894: Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execute arbitrary code via a long command line argument.
Key phrases: execute arbitrary code, execute arbitrary code via a long command line, buffer overflow
CVE-2003-0895: Buffer overflow in the Mac OS X kernel 10.2.8 and earlier allows local users, and possibly remote attackers, to cause a denial of service (crash), access portions of memory, and possibly execute arbitrary code via a long command line argument (argv[]).
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2003-0896: The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager's checkPackageAccess method.
Key phrases: execute arbitrary code, bypass sandbox restrictions, bypass sandbox restrictions and execute arbitrary code via
CVE-2003-0897: "Shatter" vulnerability in CommCtl32.dll in Windows XP may allow local users to execute arbitrary code by sending (1) BCM_GETTEXTMARGIN or (2) BCM_SETTEXTMARGIN button control messages to privileged applications.
Key phrases: execute arbitrary code, execute arbitrary code by sending (1), shatter
CVE-2003-0898: IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2.
Key phrases: overwrite arbitrary files, gain privileges, overwrite arbitrary files and gain privileges via a, symlink
CVE-2003-0899: Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' characters, which trigger the overflow when the characters are expanded to "&lt;" and "&gt;" sequences.
Key phrases: execute arbitrary code, execute arbitrary code via requests that contain ', buffer overflow
CVE-2003-0900: Perl 5.8.1 on Fedora Core does not properly initialize the random number generator when forking, which makes it easier for attackers to predict random numbers.
CVE-2003-0901: Buffer overflow in to_ascii for PostgreSQL 7.2.x, and 7.3.x before 7.3.4, allows remote attackers to execute arbitrary code.
Key phrases: execute arbitrary code, buffer overflow
CVE-2003-0902: Unknown vulnerability in minimalist mailing list manager 2.4, 2.2, and possibly other versions, allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, unknown
CVE-2003-0903: Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.
Key phrases: execute arbitrary code, execute arbitrary code via a malformed UDP response, buffer overflow, broadcast request
CVE-2003-0904: Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.
Key phrases: http connections
CVE-2003-0905: Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remote attackers to cause a denial of service (disallowing new connections) via a certain sequence of TCP/IP packets.
Key phrases: denial of service (disallowing new connections), cause a denial of service (disallowing new, unknown
CVE-2003-0906: Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code via a malformed WMF or EMF image.
Key phrases: execute arbitrary code, execute arbitrary code via a malformed WMF or, buffer overflow
CVE-2003-0907: Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.
Key phrases: execute arbitrary code, execute arbitrary code via quotation marks in an
CVE-2003-0908: The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using the File Open dialog in the Help window, a different vulnerability than CVE-2004-0213.
Key phrases: execute arbitrary code, execute arbitrary code via a "Shatter"
CVE-2003-0909: Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe command-line tool or the Task Scheduler service, aka "Windows Management Vulnerability."
Key phrases: execute arbitrary programs, execute arbitrary programs by creating a task at, windows management
CVE-2003-0910: The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory.
Key phrases: execute arbitrary code, gain access, gain access to kernel memory and execute arbitrary, expand-down data segment descriptor descriptor
CVE-2003-0913: Unknown vulnerability in the Terminal application for Mac OS X 10.3 (Client and Server) may allow "unauthorized access."
Key phrases: "unauthorized access, unknown
CVE-2003-0914: ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
Key phrases: poison the cache via a malicious name server
CVE-2003-0924: netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.
Key phrases: overwrite arbitrary files, temporary files
CVE-2003-0925: Buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed GTP MSISDN string.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-2003-0926: Ethereal 0.9.15 and earlier, and Tethereal, allows remote attackers to cause a denial of service (crash) via certain malformed (1) ISAKMP or (2) MEGACO packets.
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2003-0927: Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SOCKS dissector.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), heap-based buffer overflow, heap based buffer overflow
CVE-2003-0928: Clearswift MAILsweeper before 4.3.15 does not properly detect and filter RAR 3.20 encoded files, which allows remote attackers to bypass intended policy.
Key phrases: bypass intended policy
CVE-2003-0929: Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy.
Key phrases: bypass intended policy
CVE-2003-0930: Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded files, which allows remote attackers to bypass intended policy.
Key phrases: bypass intended policy
CVE-2003-0931: Sygate Enforcer 4.0 earlier allows remote attackers to cause a denial of service (service hang) by replaying a malformed discovery packet to UDP port 39999.
Key phrases: denial of service (service hang), cause a denial of service (service hang, malformed discovery packet
CVE-2003-0932: Buffer overflow in omega-rpg 0.90 allows local users to execute arbitrary code via a long (1) command line or (2) environment variable.
Key phrases: execute arbitrary code, execute arbitrary code via a long (1, buffer overflow
CVE-2003-0933: Buffer overflow in conquest 7.2 and earlier may allow a local user to execute arbitrary code via a long environment variable.
Key phrases: execute arbitrary code, execute arbitrary code via a long environment variable, buffer overflow
CVE-2003-0934: Symbol Access Portable Data Terminal (PDT) 8100 does not hide the default WEP keys if they are not changed, which could allow attackers to retrieve the keys and gain access to the wireless network.
Key phrases: gain access, retrieve the keys and gain access to the, default wep keys
CVE-2003-0935: Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed.
Key phrases: access data in MIB objects
CVE-2003-0936: Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe.
Key phrases: gain SYSTEM privileges, gain SYSTEM privileges via the help interface using, system privileges
CVE-2003-0937: SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PID) by obtaining a procfs file descriptor for the file and calling execve() on a setuid or setgid program, which leaves the descriptor open to the user.
Key phrases: bypass protections, bypass protections for the "as" address
CVE-2003-0938: vos24u.c in SAP database server (SAP DB) 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLAT stored procedure.
Key phrases: gain SYSTEM privileges, gain SYSTEM privileges via a malicious "NETAPI32.DLL, system privileges
CVE-2003-0939: eo420_GetStringFromVarPart in veo420.c for SAP database server (SAP DB) 7.4.03.27 and earlier may allow remote attackers to execute arbitrary code via a connect packet with a 256 byte segment to the niserver (aka serv.exe) process on TCP port 7269, which prevents the server from NULL terminating the string and leads to a buffer overflow.
Key phrases: execute arbitrary code, execute arbitrary code via a connect packet with, buffer overflow
CVE-2003-0940: Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.
Key phrases: read arbitrary files, read arbitrary files via .. (dot dot, directory traversal
CVE-2003-0941: web-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent Administration pages and modify configuration via a direct request to waadmin.wa.
Key phrases: access the Web Agent Administration pages and modify
CVE-2003-0942: Buffer overflow in Web Agent Administration service in web-tools for SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a long Name parameter to waadmin.wa.
Key phrases: execute arbitrary code, execute arbitrary code via a long Name parameter, buffer overflow
CVE-2003-0943: web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive information or redirect attacks against internal databases via (1) waecho, (2) Web SQL Interface (websql), or (3) Web Database Manager (webdbm).
Key phrases: obtain potentially sensitive information, obtain potentially sensitive information or redirect attacks against
CVE-2003-0944: Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a URL with a long requestURI.
Key phrases: execute arbitrary code, execute arbitrary code via a URL with a, buffer overflow
CVE-2003-0945: The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities.
Key phrases: conduct unauthorized activities, predictable session ids
CVE-2003-0946: Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the email address argument of a "MAIL FROM" command.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, format string
CVE-2003-0947: Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable.
Key phrases: execute arbitrary code, execute arbitrary code via a long OUT environment, buffer overflow
CVE-2003-0948: Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable.
Key phrases: execute arbitrary code, execute arbitrary code via a long HOME environment, buffer overflow
CVE-2003-0949: xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.
Key phrases: execute arbitrary commands
CVE-2003-0950: PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (system time) name of the directory used to store the file, and directly requesting that file.
Key phrases: execute arbitrary commands, execute arbitrary commands by uploading a file to
CVE-2003-0951: Partition Manager (parmgr) in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attackers to obtain sensitive data or gain privileges.
Key phrases: obtain sensitive data, gain privileges, obtain sensitive data or gain privileges
CVE-2003-0954: Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges.
Key phrases: gain privileges, buffer overflow
CVE-2003-0955: OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code in 3.4 via a program with an invalid header that is not properly handled by (1) ibcs2_exec.c in the iBCS2 emulation (compat_ibcs2) or (2) exec_elf.c, which leads to a stack-based buffer overflow.
Key phrases: execute arbitrary code, denial of service (kernel panic), cause a denial of service (kernel panic, stack-based buffer overflow, stack based buffer overflow
CVE-2003-0956: Multiple race conditions in the handling of O_DIRECT in Linux kernel prior to version 2.4.22 could cause stale data to be returned from the disk when handling sparse files, or cause incorrect data to be returned when a file is truncated as it is being read, which might allow local users to obtain sensitive data that was originally owned by other users, a different vulnerability than CVE-2003-0018.
Key phrases: obtain sensitive data, obtain sensitive data that was originally owned by, multiple race conditions
CVE-2003-0959: Multiple integer overflows in the 32bit emulation for AMD64 architectures in Linux 2.4 kernel before 2.4.21 allows attackers to cause a denial of service or gain root privileges via unspecified vectors that trigger copy_from_user function calls with improper length arguments.
Key phrases: gain root privileges, cause a denial of service or gain root, multiple integer overflows, unspecified vectors
CVE-2003-0960: OpenCA before 0.9.1.4 does not use the correct certificate in a chain to check the serial, which could cause OpenCA to accept revoked or expired certificates.
Key phrases: expired certificates
CVE-2003-0961: Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges.
Key phrases: gain root privileges, integer overflow
CVE-2003-0962: Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.
Key phrases: execute arbitrary code, execute arbitrary code and possibly escape the chroot, heap-based buffer overflow, heap based buffer overflow
CVE-2003-0963: Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.
Key phrases: execute arbitrary code, execute arbitrary code via long directory names that, buffer overflows
CVE-2003-0965: Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities.
Key phrases: steal session cookies and conduct unauthorized activities, cross-site scripting (xss)
CVE-2003-0966: Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code via a long Subject line.
Key phrases: execute arbitrary code, execute arbitrary code via a long Subject line, buffer overflow
CVE-2003-0967: rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute.
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2003-0968: Stack-based buffer overflow in SMB_Logon_Server of the rlm_smb experimental module for FreeRADIUS 0.9.3 and earlier allows remote attackers to execute arbitrary code via a long User-Password attribute.
Key phrases: execute arbitrary code, execute arbitrary code via a long User-, stack-based buffer overflow, stack based buffer overflow
CVE-2003-0969: mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.
Key phrases: execute arbitrary code, overwrite memory and possibly execute arbitrary code via, format string
CVE-2003-0970: The Network Management Port on Sun Fire B1600 systems allows remote attackers to cause a denial of service (packet loss) via ARP packets, which cause all ports to become temporarily disabled.
Key phrases: denial of service (packet loss), cause a denial of service (packet loss, network management port, temporarily disabled
CVE-2003-0971: GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.
Key phrases: determine the private key from a signature
CVE-2003-0972: Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.
Key phrases: execute arbitrary code, execute arbitrary code via a large number of, buffer overflow
CVE-2003-0973: Unknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service (httpd crash) via a certain query string.
Key phrases: denial of service (httpd crash), cause a denial of service (httpd crash, unknown
CVE-2003-0974: Applied Watch Command Center allows remote attackers to conduct unauthorized activities without authentication, such as (1) add new users to a console, as demonstrated using appliedsnatch.c, or (2) add spurious IDS rules to sensors, as demonstrated using addrule.c.
Key phrases: conduct unauthorized activities without authentication
CVE-2003-0975: Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.
Key phrases: steal user cookies from another domain via a
CVE-2003-0976: NFS Server (XNFS.NLM) for Novell NetWare 6.5 does not properly enforce sys:\\\\etc\\\\exports when hostname aliases from sys:etc\\\\hosts file are used, which could allow users to mount file systems when XNFS should deny the host.
Key phrases: mount file systems when XNFS should deny the
CVE-2003-0977: CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.
Key phrases: cause the CVS server to create directories and, malformed module requests
CVE-2003-0978: Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious keyserver to cause a denial of service (crash) and possibly execute arbitrary code during key retrieval.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), format string