yahoo-inc/cve-impacts huggingface dataset:
CVE-2003-0136: psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symbolic link attack, psbanner
CVE-2003-0137: SNMP daemon in the DX200 based network element for Nokia Serving GPRS support node (SGSN) allows remote attackers to read SNMP options via arbitrary community strings.
Key phrases: read SNMP options via arbitrary community strings
CVE-2003-0138: Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack.
Key phrases: impersonate any principal in a realm via a, chosen-plaintext
CVE-2003-0139: Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."
Key phrases: create krb4 tickets for unauthorized principals using a, weaknesses, cut-and-paste, ticket splicing
CVE-2003-0140: Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a crafted folder.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2003-0141: The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the length values 286-287, which are treated as a very large length.
Key phrases: overwrite arbitrary memory, corrupt the heap and overwrite arbitrary memory via, length values, heap overwrite
CVE-2003-0142: Adobe Acrobat Reader (acroread) 6, under certain circumstances when running with the "Certified plug-ins only" option disabled, loads plug-ins with signatures used for older versions of Acrobat, which can allow attackers to cause Acrobat to enter Certified mode and run untrusted plugins by modifying the CTIsCertifiedMode function.
Key phrases: cause Acrobat to enter Certified mode and run, signatures
CVE-2003-0143: The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name.
Key phrases: execute arbitrary code, execute arbitrary code via a buffer overflow in
CVE-2003-0144: Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.
Key phrases: gain root privileges, gain root privileges via long command line arguments, buffer overflow
CVE-2003-0145: Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," allows remote attackers to cause a denial of service (infinite loop), a different vulnerability than CAN-2003-0093.
Key phrases: denial of service (infinite loop), cause a denial of service (infinite loop
CVE-2003-0146: Multiple vulnerabilities in NetPBM 9.20 and earlier, and possibly other versions, may allow remote attackers to cause a denial of service or execute arbitrary code via "maths overflow errors" such as (1) integer signedness errors or (2) integer overflows, which lead to buffer overflows.
Key phrases: execute arbitrary code, cause a denial of service or execute arbitrary, maths overflow errors, integer signedness errors, integer overflows, buffer overflows
CVE-2003-0147: OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal).
Key phrases: obtain the server's private key by determining factors
CVE-2003-0148: The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that (1) obtain the database administrator username and encrypted password in a configuration file from the ePO server using a certain request, (2) crack the password due to weak cryptography, and (3) use the password to pass commands through xp_cmdshell.
Key phrases: execute arbitrary code, obtain the database, execute arbitrary code via a series of steps, weak cryptography
CVE-2003-0149: Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters.
Key phrases: execute arbitrary code, execute arbitrary code via a POST request containing, heap-based buffer overflow, heap based buffer overflow
CVE-2003-0150: MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.
Key phrases: gain root privileges, gain root privileges by using the "SELECT, world-writeable files
CVE-2003-0151: BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that perform administrative functions, which allows remote attackers to read arbitrary files or execute arbitrary code.
Key phrases: read arbitrary files, read arbitrary files or execute arbitrary code
CVE-2003-0152: Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user.
Key phrases: execute arbitrary commands, execute arbitrary commands as the www-data, unknown
CVE-2003-0153: bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi.
CVE-2003-0154: Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.
Key phrases: execute arbitrary web script, execute arbitrary web script via (1), cross-site scripting vulnerabilities (xss)
CVE-2003-0155: bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.
Key phrases: gain access, gain access to the parameters page without authentication
CVE-2003-0156: Directory traversal vulnerability in Cross-Referencing Linux (LXR) allows remote attackers to read arbitrary files via .. (dot dot) sequences in the v parameter.
Key phrases: read arbitrary files, read arbitrary files via .. (dot dot, directory traversal
CVE-2003-0159: Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, heap-based buffer overflow, heap based buffer overflow
CVE-2003-0160: Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.2.11 allow remote attackers to inject arbitrary HTML code and steal information from a client's web browser.
Key phrases: inject arbitrary HTML code, inject arbitrary HTML code and steal information from, cross-site scripting (xss)
CVE-2003-0161: The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-2003-0162: Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page.
Key phrases: gain privileges, reset passwords of other users and gain privileges, hidden form fields
CVE-2003-0163: decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service (crash) via a negative length, which overwrites arbitrary heap memory with a zero byte.
Key phrases: overwrites arbitrary heap memory, denial of service (crash), cause a denial of service (crash), negative length
CVE-2003-0165: Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.
Key phrases: execute arbitrary code, execute arbitrary code via format string specifiers in
CVE-2003-0166: Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.
Key phrases: execute arbitrary code, denial of service (memory consumption), cause a denial of service (memory consumption, integer signedness error
CVE-2003-0167: Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a specially crafted mail folder, a different vulnerability than CVE-2003-0140.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), buffer overflows
CVE-2003-0168: Buffer overflow in Apple QuickTime Player 5.x and 6.0 for Windows allows remote attackers to execute arbitrary code via a long QuickTime URL.
Key phrases: execute arbitrary code, execute arbitrary code via a long QuickTime URL, buffer overflow
CVE-2003-0169: hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of service (CPU consumption) via a request to hpnst.exe that calls itself, which causes an infinite loop.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, infinite loop
CVE-2003-0170: Unknown vulnerability in ftpd in IBM AIX 5.2, when configured to use Kerberos 5 for authentication, allows remote attackers to gain privileges via unknown attack vectors.
Key phrases: gain privileges, gain privileges via unknown attack vectors
CVE-2003-0171: DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program.
Key phrases: execute arbitrary commands, execute arbitrary commands by modifying the PATH to
CVE-2003-0172: Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument.
Key phrases: execute arbitrary code, cause a crash and possibly execute arbitrary code, buffer overflow
CVE-2003-0173: xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.
Key phrases: gain root privileges
CVE-2003-0174: The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.
Key phrases: log in without a password
CVE-2003-0175: SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWATCH ioctl.
Key phrases: denial of service (kernel panic), cause a denial of service (kernel panic
CVE-2003-0176: The Name Service Daemon (nsd), when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via a UDP port scan.
Key phrases: denial of service (crash), cause a denial of service (crash), udp port scan
CVE-2003-0177: SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause subsequent group membership entries to be processed inadvertently.
CVE-2003-0178: Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parameter for iNotes, (2) the Foldername option in the PresetFields parameter for iNotes, or (3) a long Host header, which is inserted into a long Location header and used during a redirect operation.
Key phrases: execute arbitrary code, cause a denial of service or execute arbitrary, buffer overflows
CVE-2003-0179: Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control.
Key phrases: execute arbitrary code, execute arbitrary code via multiple attack vectors, buffer overflow
CVE-2003-0180: Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the h_PageUI form.
Key phrases: cause a denial of service via an incomplete, incomplete post request
CVE-2003-0181: Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary Value Field POST request" as demonstrated using the s_Validation form with a long, unknown parameter name.
Key phrases: cause a denial of service via a ", fictionary value field post request
CVE-2003-0187: The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows remote attackers to cause a denial of service (resource consumption) due to an inconsistency with Linux 2.4.20's support of linked lists, which causes Netfilter to fail to identify connections with an UNCONFIRMED status and use large timeouts.
Key phrases: denial of service (resource consumption), cause a denial of service (resource consumption, large timeouts
CVE-2003-0188: lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.
Key phrases: execute arbitrary commands, execute arbitrary commands as other lv users by
CVE-2003-0189: The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which allows remote attackers to cause a denial of service (failed Basic authentication with valid usernames and passwords) when a threaded MPM is used.
Key phrases: denial of service (failed Basic authentication with valid usernames and passwords), cause a denial of service (failed Basic
CVE-2003-0190: OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.
Key phrases: determine valid usernames via a timing attack
CVE-2003-0192: Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache to use the weak ciphersuite.
Key phrases: per-directory renegotiations, weak ciphersuite
CVE-2003-0193: msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names ("word$$.html").
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on, predictable temporary file names
CVE-2003-0194: tcpdump does not properly drop privileges to the pcap user when starting up.
CVE-2003-0195: CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (631), which does not time out.
Key phrases: cause a denial of service via a partial, partial printing request
CVE-2003-0196: Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different vulnerability than CVE-2003-0201.
Key phrases: execute arbitrary code, execute arbitrary code or cause a denial of, buffer overflows, denial of service
CVE-2003-0197: Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK).
Key phrases: gain privileges, gain privileges via a long ISC_LOCK_ENV environment variable, buffer overflow
CVE-2003-0198: Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files.
Key phrases: modify the permissions of the DropBox folder and, unauthorized files
CVE-2003-0201: Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
Key phrases: execute arbitrary code, buffer overflow
CVE-2003-0202: The (1) halstead and (2) gather_stats scripts in metrics 1.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-2003-0203: Buffer overflow in moxftp 2.2 and earlier allows remote malicious FTP servers to execute arbitrary code via a long FTP banner.
Key phrases: execute arbitrary code, execute arbitrary code via a long FTP banner, buffer overflow
CVE-2003-0204: KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or (2) PDF files, related to missing -dPARANOIDSAFER and -dSAFER arguments when using the kghostview Ghostscript viewer.
Key phrases: execute arbitrary commands, execute arbitrary commands via (1) PostScript
CVE-2003-0205: gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2003-0206: gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to cause a denial of service (crash) via (1) link or (2) title elements that contain multiple lines.
Key phrases: denial of service (crash), cause a denial of service (crash), title elements, multiple lines
CVE-2003-0207: ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers to overwrite arbitrary files.
Key phrases: overwrite arbitrary files, insecure temporary files
CVE-2003-0208: Cross-site scripting (XSS) vulnerability in Macromedia Flash ad user tracking capability allows remote attackers to insert arbitrary Javascript via the clickTAG field.
Key phrases: insert arbitrary Javascript, insert arbitrary Javascript via the clickTAG field, cross-site scripting (xss)
CVE-2003-0209: Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.
Key phrases: execute arbitrary code, execute arbitrary code via large sequence numbers in, integer overflow, heap-based buffer overflow, heap based buffer overflow
CVE-2003-0210: Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-2003-0211: Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service (memory consumption) via a large number of rejected connections.
Key phrases: denial of service (memory consumption), cause a denial of service (memory consumption, memory leak, rejected connections
CVE-2003-0212: handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes full and sets an array index incorrectly, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of connections.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute
CVE-2003-0213: ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow.
Key phrases: cause a denial of service via a length, buffer overflow
CVE-2003-0214: run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on, run-mailcap
CVE-2003-0215: SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via the (1) username and (2) password fields, and possibly other fields.
Key phrases: bypass authentication, bypass authentication via the (1) username, sql injection
CVE-2003-0216: Unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to the enable mode without a password.
Key phrases: bypass authentication, gain access, bypass authentication and gain access to the enable, unknown
CVE-2003-0217: Cross-site scripting (XSS) vulnerability in Neoteris Instant Virtual Extranet (IVE) 3.01 and earlier allows remote attackers to insert arbitrary web script and bypass authentication via a certain CGI script.
Key phrases: insert arbitrary web script, bypass authentication, insert arbitrary web script and bypass authentication via, cross-site scripting (xss)
CVE-2003-0218: Buffer overflow in PostMethod() function for Monkey HTTP Daemon (monkeyd) 0.6.1 and earlier allows remote attackers to execute arbitrary code via a POST request with a large body.
Key phrases: execute arbitrary code, execute arbitrary code via a POST request with, buffer overflow
CVE-2003-0219: Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute administrator commands by sniffing packets from a valid session and replaying them against the remote administration server.
Key phrases: execute administrator commands by sniffing packets from a, valid session
CVE-2003-0220: Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet.
Key phrases: execute arbitrary code, execute arbitrary code via a handshake packet, buffer overflow
CVE-2003-0221: The (1) dupatch and (2) setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allows local users to overwrite files and possibly gain root privileges via a symlink attack.
Key phrases: gain root privileges, overwrite files and possibly gain root privileges via, symlink
CVE-2003-0222: Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.
Key phrases: execute arbitrary code, execute arbitrary code via a "CREATE DATABASE, stack-based buffer overflow, stack based buffer overflow
CVE-2003-0223: Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in Microsoft Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to embed a URL containing script in a redirection message.
Key phrases: embed a URL containing script in a redirection, cross-site scripting vulnerability (xss)
CVE-2003-0224: Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include (SSI) directive with a long filename, aka "Server Side Include Web Pages Buffer Overrun."
Key phrases: execute arbitrary code, execute arbitrary code via a web page with, buffer overflow, buffer overrun
CVE-2003-0225: The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service (memory consumption) with an ASP page.
Key phrases: denial of service (memory consumption), generate a large header to cause a denial, memory requests
CVE-2003-0226: Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or (2) SEARCH method, which generates an error condition that is not properly handled.
Key phrases: cause a denial of service via a long, error condition
CVE-2003-0227: The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute arbitrary code via a certain network request.
Key phrases: execute arbitrary code, cause a denial of service in Internet Information
CVE-2003-0228: Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed in an arbitrary location.
Key phrases: execute arbitrary code, execute arbitrary code via a skins file with, directory traversal, arbitrary location
CVE-2003-0230: Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability.
Key phrases: gain privileges, gain privileges by hijacking a named pipe during, named pipe hijacking
CVE-2003-0231: Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.
Key phrases: denial of service (crash or hang), cause a denial of service (crash or
CVE-2003-0232: Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow.
Key phrases: execute arbitrary code, execute arbitrary code via a certain request to, buffer overflow
CVE-2003-0233: Heap-based buffer overflow in plugin.ocx for Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via the Load() method, a different vulnerability than CVE-2003-0115.
Key phrases: execute arbitrary code, execute arbitrary code via the Load(), heap-based buffer overflow, heap based buffer overflow
CVE-2003-0235: Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command.
Key phrases: execute arbitrary code, execute arbitrary code via format strings in the
CVE-2003-0236: Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subject or (2) Date headers.
Key phrases: execute arbitrary code, execute arbitrary code via the (1), integer signedness errors
CVE-2003-0237: The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.
Key phrases: install arbitrary software, install arbitrary software via a spoofing attack
CVE-2003-0238: The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CPU consumption) by spoofing the address of an ADS server and sending HTML with a -1 width in a table tag.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, spoofing
CVE-2003-0239: icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF89a headers that do not contain a GCT (Global Color Table) or an LCT (Local Color Table) after an Image Descriptor.
Key phrases: cause a denial of service via malformed GIF89a, malformed headers
CVE-2003-0240: The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).
Key phrases: bypass access restrictions, bypass access restrictions and modify configuration via an
CVE-2003-0241: FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it untrusted, which allows remote attackers to execute arbitrary code via a message that is rendered in IE using a less secure zone.
Key phrases: execute arbitrary code, execute arbitrary code via a message that is, less secure zone
CVE-2003-0242: IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which could allow traffic that is not explicitly allowed by the policies.
Key phrases: traffic that is not explicitly allowed by the
CVE-2003-0243: Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter for the (1) normal_html.cgi or (2) member_html.cgi scripts.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2003-0244: The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service (CPU consumption) via packets with forged source addresses that cause a large number of hash table collisions.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, cpu consumption, packets with forged source addresses, hash table collisions
CVE-2003-0245: Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long strings, as demonstrated using XML objects to mod_dav, and possibly other vectors.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), vulnerability in the apr_psprintf function
CVE-2003-0246: The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports.
Key phrases: gain read or write access, gain read or write access to certain I
CVE-2003-0247: Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service ("kernel oops").
Key phrases: denial of service ("kernel oops"), cause a denial of service ("kernel, unknown
CVE-2003-0248: The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.
Key phrases: modify CPU state registers via a malformed address
CVE-2003-0249: PHP treats unknown methods such as "PoSt" as a GET request, which could allow attackers to intended access restrictions if PHP is running on a server that passes on all methods, such as Apache httpd 2.0, as demonstrated using a Limit directive.  NOTE: this issue has been disputed by the Apache security team, saying "It is by design that PHP allows scripts to process any request method.  A script which does not explicitly verify the request method will hence be processed as normal for arbitrary methods.  It is therefore expected behaviour that one cannot implement per-method access control using the Apache configuration alone, which is the assumption made in this report.
Key phrases: intended access restrictions if PHP is running on, process any request method
CVE-2003-0251: ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the server, which causes ypserv to block.
Key phrases: cause a denial of service via a TCP, block
CVE-2003-0252: Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute
CVE-2003-0253: The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a denial of service.
Key phrases: denial of service
CVE-2003-0254: Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service (CPU consumption by infinite loop) when the FTP proxy server fails to create an IPv6 socket.
Key phrases: denial of service (CPU consumption by infinite loop), cause a denial of service (CPU consumption, cpu consumption
CVE-2003-0255: The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, which prevents GnuPG from warning the encrypting user when a user ID does not have a trusted path.
CVE-2003-0256: The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands
CVE-2003-0257: Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or root privileges.
Key phrases: gain printq or root privileges, format string
CVE-2003-0258: Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.
Key phrases: reach the private network without authentication
CVE-2003-0259: Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7 allows remote attackers to cause a denial of service (reload) via a malformed SSH initialization packet.
Key phrases: denial of service (reload), cause a denial of service (reload), malformed ssh initialization packet
CVE-2003-0260: Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service (slowdown and possibly reload) via a flood of malformed ICMP packets.
Key phrases: denial of service (slowdown and possibly reload), cause a denial of service (slowdown and
CVE-2003-0261: fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges.
Key phrases: gain root privileges
CVE-2003-0262: leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges, which KATAXWR is not designed to have.
Key phrases: gain root privileges, gain root privileges by exploiting unknown vulnerabilities related, escalate privilege
CVE-2003-0263: Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) 1.22 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands.
Key phrases: execute arbitrary code, execute arbitrary code via long (1), buffer overflows
CVE-2003-0264: Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.
Key phrases: execute arbitrary code, execute arbitrary code via (1) a, buffer overflows
CVE-2003-0265: Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed.
Key phrases: gain root privileges, gain root privileges by modifying the files before, race condition
CVE-2003-0266: Multiple buffer overflows in SLWebMail 3 on Windows systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long Language parameter to showlogin.dll, (2) a long CompanyID parameter to recman.dll, (3) a long CompanyID parameter to admin.dll, or (4) a long CompanyID parameter to globallogin.dll.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflows
CVE-2003-0267: ShowGodLog.dll in SLWebMail 3 on Windows systems allows remote attackers to read arbitrary files by directly calling ShowGodLog.dll with an argument specifying the full path of the target file.
Key phrases: read arbitrary files, read arbitrary files by directly calling ShowGodLog.dll with
CVE-2003-0268: SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which reveals the path in an error message.
Key phrases: identify the full path of the server via, invalid requests
CVE-2003-0269: Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable.
Key phrases: gain privileges, gain privileges via a long HOME environment variable, buffer overflow
CVE-2003-0270: The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet or non-WEP connections.
Key phrases: obtain administrative access, obtain administrative access via sniffing when the capability, weak encryption
CVE-2003-0271: Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument.
Key phrases: execute arbitrary code, execute arbitrary code via a long USER argument, buffer overflow
CVE-2003-0272: admin.php in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cookie to an "adminok" value.
Key phrases: gain administrative privileges, gain administrative privileges by setting the miniPortailAdmin cookie
CVE-2003-0273: Cross-site scripting (XSS) vulnerability in the web interface for Request Tracker (RT) 1.0 through 1.0.7 allows remote attackers to execute script via message bodies.
Key phrases: execute script via message bodies, cross-site scripting (xss)
CVE-2003-0274: Buffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute arbitrary code via a long ULISTPROC_UMASK value.
Key phrases: execute arbitrary code, execute arbitrary code via a long ULISTPROC_UMASK value, buffer overflow
CVE-2003-0275: SSI.php in YaBB SE 1.5.2 allows remote attackers to execute arbitrary PHP code by modifying the sourcedir parameter to reference a URL on a remote web server that contains the code.
Key phrases: execute arbitrary PHP code, execute arbitrary PHP code by modifying the sourcedir
CVE-2003-0276: Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GET request with a large number of / characters.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2003-0277: Directory traversal vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the file parameter.
Key phrases: read arbitrary files, read arbitrary files via .. (dot dot, directory traversal
CVE-2003-0278: Cross-site scripting (XSS) vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to insert arbitrary web script via the file parameter.
Key phrases: insert arbitrary web script, insert arbitrary web script via the file parameter, cross-site scripting (xss)
CVE-2003-0279: Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5 allows remote attackers to steal sensitive information via numeric fields, as demonstrated using (1) the viewlink function and cid parameter, or (2) index.php.
Key phrases: steal sensitive information via numeric fields, sql injection
CVE-2003-0280: Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands.
Key phrases: execute arbitrary code, execute arbitrary code via long (1), buffer overflows
CVE-2003-0281: Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_inet_server, (2) gds_lock_mgr, or (3) gds_drop.
Key phrases: execute arbitrary code, execute arbitrary code via a long INTERBASE environment, buffer overflow
CVE-2003-0282: Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via invalid characters between two, directory traversal
CVE-2003-0283: Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject arbitrary web script and HTML tags via a message with a "<<" before a tag name in the (1) subject, (2) author's name, or (3) author's e-mail.
Key phrases: inject arbitrary web script, inject arbitrary web script and HTML tags via, cross-site scripting (xss)
CVE-2003-0284: Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the Plug-ins folder that spread to other PDF documents, as demonstrated by the W32.Yourde virus.
Key phrases: write arbitrary files, write arbitrary files into the Plug-ins
CVE-2003-0285: IBM AIX 5.2 and earlier distributes Sendmail with a configuration file (sendmail.cf) with the (1) promiscuous_relay, (2) accept_unresolvable_domains, and (3) accept_unqualified_senders features enabled, which allows Sendmail to be used as an open mail relay for sending spam e-mail.
Key phrases: be used as an open mail relay for, promiscuous_relay, accept_unqualified_senders
CVE-2003-0286: SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.
Key phrases: execute arbitrary stored procedures via the Email variable, sql injection
CVE-2003-0287: Cross-site scripting (XSS) vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via the Name textbox, possibly when the "Allow HTML in comments?" option is enabled.
Key phrases: insert arbitrary web script or HTML, insert arbitrary web script or HTML via the, HTML in comments?" option is enabled, cross-site scripting (xss)
CVE-2003-0288: Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file.
Key phrases: execute arbitrary code, execute arbitrary code via file with a long, buffer overflow
CVE-2003-0289: Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.
Key phrases: gain privileges, gain privileges via format string specifiers in the
CVE-2003-0290: Memory leak in eServ 2.9x allows remote attackers to cause a denial of service (memory exhaustion) via a large number of connections, whose memory is not freed when the connection is terminated.
Key phrases: denial of service (memory exhaustion), cause a denial of service (memory exhaustion, memory leak
CVE-2003-0291: 3com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP responses, which allows remote attackers to identify the contents of previous HTTP requests by sniffing DHCP packets.
Key phrases: identify the contents of previous HTTP requests by
CVE-2003-0292: Cross-site scripting (XSS) vulnerability in Inktomi Traffic-Server 5.5.1 allows remote attackers to insert arbitrary web script or HTML into an error page that appears to come from the domain that the client is visiting, aka "Man-in-the-Middle" XSS.
Key phrases: insert arbitrary web script or HTML, insert arbitrary web script or HTML into an, cross-site scripting (xss)
CVE-2003-0293: PalmOS allows remote attackers to cause a denial of service (CPU consumption) via a flood of ICMP echo request (ping) packets.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, cpu consumption
CVE-2003-0294: autohtml.php in php-proxima 6.0 and earlier allows remote attackers to read arbitrary files via the name parameter in a modload operation.
Key phrases: read arbitrary files, read arbitrary files via the name parameter in
CVE-2003-0295: Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capability.
Key phrases: inject arbitrary web script, inject arbitrary web script and HTML via the, cross-site scripting (xss)
CVE-2003-0296: The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, large literal size values, integer signedness errors, integer overflow errors
CVE-2003-0297: c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), integer signedness errors, integer overflow errors
CVE-2003-0298: The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large (1) literal and possibly (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, integer signedness errors, integer overflow errors