[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0274?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0275 mean in the context of cybersecurity?

[Assistant] CVE-2003-0275


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0275.

[Assistant] SSI.php in YaBB SE 1.5.2 allows remote attackers to execute arbitrary PHP code by modifying the sourcedir parameter to reference a URL on a remote web server that contains the code.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0275?

[Assistant] {'name': '20030509 II-Labs Advisory: Remote code execution in YaBBse 1.5.2 (php version)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105249980809988&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0275?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0276 mean in the context of cybersecurity?

[Assistant] CVE-2003-0276


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0276.

[Assistant] Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GET request with a large number of / characters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0276?

[Assistant] {'name': 'pi3web-get-request-bo(11889)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11889'}, {'name': '7555', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7555'}, {'name': '20030512 Unix Version of the Pi3web DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105275789410250&w=2'}, {'name': '20030428 Pi3Web 2.0.1 DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105155818012718&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0276?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0277 mean in the context of cybersecurity?

[Assistant] CVE-2003-0277


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0277.

[Assistant] Directory traversal vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the file parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0277?

[Assistant] {'name': 'happymall-dotdot-directory-traversal(11987)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11987'}, {'name': '7559', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7559'}, {'name': '20030512 One more flaw in Happymall', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105276130814262&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0277?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0278 mean in the context of cybersecurity?

[Assistant] CVE-2003-0278


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0278.

[Assistant] Cross-site scripting (XSS) vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to insert arbitrary web script via the file parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0278?

[Assistant] {'name': '7557', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7557'}, {'name': 'happymall-normalhtml-xss(11988)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11988'}, {'name': '20030512 One more flaw in Happymall', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105276130814262&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0278?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0279 mean in the context of cybersecurity?

[Assistant] CVE-2003-0279


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0279.

[Assistant] Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5 allows remote attackers to steal sensitive information via numeric fields, as demonstrated using (1) the viewlink function and cid parameter, or (2) index.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0279?

[Assistant] {'name': '20030512 Lot of SQL injection on PHP-Nuke 6.5 (secure weblog!)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105276019312980&w=2'}, {'name': '7588', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7588'}, {'name': '7558', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7558'}, {'name': '20030513 More and More SQL injection on PHP-Nuke 6.5.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-05/0147.html'}, {'name': 'phpnuke-web-sql-injection(11984)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11984'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0279?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0280 mean in the context of cybersecurity?

[Assistant] CVE-2003-0280


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0280.

[Assistant] Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0280?

[Assistant] {'name': '7548', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7548'}, {'name': '7547', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7547'}, {'name': '20030510 Multiple Buffer Overflow Vulnerabilities Found in CMailServer 4.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105258772101349&w=2'}, {'name': '20030510 Multiple Buffer Overflow Vulnerabilities Found in CMailServer 4.0', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0062.html'}, {'name': 'cmailserver-smtp-bo(11975)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11975'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0280?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0281 mean in the context of cybersecurity?

[Assistant] CVE-2003-0281


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0281.

[Assistant] Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_inet_server, (2) gds_lock_mgr, or (3) gds_drop.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0281?

[Assistant] {'name': 'firebird-interbase-bo(11977)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11977'}, {'name': 'GLSA-200405-18', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200405-18.xml'}, {'name': '20020617 Interbase 6.0 malloc() issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/lists/bugtraq/2002/Jun/0212.html'}, {'name': '20030509 Firebird Local exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105259012802997&w=2'}, {'name': '7546', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7546'}, {'name': '8758', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8758'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0281?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0282 mean in the context of cybersecurity?

[Assistant] CVE-2003-0282


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0282.

[Assistant] Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0282?

[Assistant] {'name': '20030509 unzip directory traversal revisited', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105259038503175&w=2'}, {'name': 'CLA-2003:672', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000672'}, {'name': 'unzip-dotdot-directory-traversal(12004)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12004'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.info-zip.org/FAQ.html'}, {'name': 'RHSA-2003:199', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-199.html'}, {'name': 'MDKSA-2003:073', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:073'}, {'name': 'TLSA-2003-42', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/security/TLSA-2003-42.txt'}, {'name': 'oval:org.mitre.oval:def:619', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A619'}, {'name': 'N-111', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-111.shtml'}, {'name': 'CSSA-2003-031.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-031.0.txt'}, {'name': '7550', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7550'}, {'name': 'CSSA-2003-031.0', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-031.0.txt'}, {'name': '20030710 [OpenPKG-SA-2003.033] OpenPKG Security Advisory (infozip)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105786446329347&w=2'}, {'name': 'RHSA-2003:200', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-200.html'}, {'name': 'IMNX-2003-7+-017-01', 'tags': ['vendor-advisory', 'x_refsource_IMMUNIX'], 'url': 'http://download.immunix.org/ImmunixOS/7+/Updates/errata/IMNX-2003-7+-017-01'}, {'name': 'DSA-344', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-344'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0282?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0283 mean in the context of cybersecurity?

[Assistant] CVE-2003-0283


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0283.

[Assistant] Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject arbitrary web script and HTML tags via a message with a "<<" before a tag name in the (1) subject, (2) author's name, or (3) author's e-mail.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0283?

[Assistant] {'name': 'phorum-message-html-injection(11974)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11974'}, {'name': "20030509 Re: A Phorum's bug...", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105251421925394&w=2'}, {'name': '7545', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7545'}, {'name': "20030509 A Phorum's bug...", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105251043821533&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0283?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0284 mean in the context of cybersecurity?

[Assistant] CVE-2003-0284


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0284.

[Assistant] Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the Plug-ins folder that spread to other PDF documents, as demonstrated by the W32.Yourde virus.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0284?

[Assistant] {'name': 'VU#184820', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/184820'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/downloads/detail.jsp?ftpID=2121'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0284?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0285 mean in the context of cybersecurity?

[Assistant] CVE-2003-0285


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0285.

[Assistant] IBM AIX 5.2 and earlier distributes Sendmail with a configuration file (sendmail.cf) with the (1) promiscuous_relay, (2) accept_unresolvable_domains, and (3) accept_unqualified_senders features enabled, which allows Sendmail to be used as an open mail relay for sending spam e-mail.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0285?

[Assistant] {'name': 'aix-sendmail-mail-relay(11993)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11993'}, {'name': '20030513 AIX sendmail open relay', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105284689228961&w=2'}, {'name': '7580', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7580'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.sdsc.edu/advisories/2003.05.13-AIX-sendmail.txt'}, {'name': 'VU#814617', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/814617'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0285?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0286 mean in the context of cybersecurity?

[Assistant] CVE-2003-0286


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0286.

[Assistant] SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0286?

[Assistant] {'name': 'snitz-register-sql-injection(11981)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11981'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/0305-exploits/snitz_exec.txt'}, {'name': '20030513 Snitz Forum 3.3.03 Remote Command Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105277599131134&w=2'}, {'name': '35733', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35733'}, {'name': '20030512 Snitz Forum 3.3.03 Remote Command Execution', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0067.html'}, {'name': '56166', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/56166'}, {'name': '35764', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/35764'}, {'name': '7549', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7549'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0286?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0287 mean in the context of cybersecurity?

[Assistant] CVE-2003-0287


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0287.

[Assistant] Cross-site scripting (XSS) vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via the Name textbox, possibly when the "Allow HTML in comments?" option is enabled.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0287?

[Assistant] {'name': '20030513 Re: CSS found in Movable Type -- Nope', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105284589927655&w=2'}, {'name': 'movable-type-comment-xss(12003)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12003'}, {'name': '20030512 Re: CSS found in Movable Type', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105277690132079&w=2'}, {'name': '7560', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7560'}, {'name': '20030512 CSS found in Movable Type', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105276879622636&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0287?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0288 mean in the context of cybersecurity?

[Assistant] CVE-2003-0288


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0288.

[Assistant] Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0288?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.lac.co.jp/security/english/snsadv_e/64_e.html'}, {'name': '20030513 [SNS Advisory No.64] IP Messenger for Win Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105283843417610&w=2'}, {'name': '7566', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7566'}, {'name': 'ip-messenger-filename-bo(11986)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11986'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0288?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0289 mean in the context of cybersecurity?

[Assistant] CVE-2003-0289


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0289.

[Assistant] Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0289?

[Assistant] {'name': '200305-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://forums.gentoo.org/viewtopic.php?t=54904'}, {'name': '7565', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7565'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.berlios.de/pub/cdrecord/alpha/cdrtools-2.01a14.tar.gz'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/exploits/5ZP0C2AAAC.html'}, {'name': '20030513 cdrtools2.0 Format String Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105285564307225&w=2'}, {'name': 'MDKSA-2003:058', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:058'}, {'name': '20030513 Cdrecord_local_root_exploit.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105286031812533&w=2'}, {'name': 'cdrtools-scsiopen-format-string(12007)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12007'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0289?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0290 mean in the context of cybersecurity?

[Assistant] CVE-2003-0290


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0290.

[Assistant] Memory leak in eServ 2.9x allows remote attackers to cause a denial of service (memory exhaustion) via a large number of connections, whose memory is not freed when the connection is terminated.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0290?

[Assistant] {'name': 'eserv-multiple-connections-dos(11973)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11973'}, {'name': '20030511 eServ Memory Leak Enables Denial of Service Attacks', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0064.html'}, {'name': '7552', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7552'}, {'name': '20030513 eServ Memory Leak Solution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105284631428187&w=2'}, {'name': '20030511 eServ Memory Leak Enables Denial of Service Attacks', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105284630228137&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0290?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0291 mean in the context of cybersecurity?

[Assistant] CVE-2003-0291


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0291.

[Assistant] 3com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP responses, which allows remote attackers to identify the contents of previous HTTP requests by sniffing DHCP packets.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0291?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://nautopia.coolfreepages.com/vulnerabilidades/3com812_dhcp_leak.htm'}, {'name': '20030515 RE : Memory leak in 3COM DSL routers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105301488426951&w=2'}, {'name': '7592', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7592'}, {'name': '3com-officeconnect-memory-leak(11999)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11999'}, {'name': '20030514 Memory leak in 3COM 812 DSL routers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105292451702516&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0291?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0292 mean in the context of cybersecurity?

[Assistant] CVE-2003-0292


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0292.

[Assistant] Cross-site scripting (XSS) vulnerability in Inktomi Traffic-Server 5.5.1 allows remote attackers to insert arbitrary web script or HTML into an error page that appears to come from the domain that the client is visiting, aka "Man-in-the-Middle" XSS.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0292?

[Assistant] {'name': '20030514 Inktomi Traffic-Server XSS: man-in-the-middle XSS !', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105292750807005&w=2'}, {'name': '7596', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7596'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0292?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0293 mean in the context of cybersecurity?

[Assistant] CVE-2003-0293


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0293.

[Assistant] PalmOS allows remote attackers to cause a denial of service (CPU consumption) via a flood of ICMP echo request (ping) packets.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0293?

[Assistant] {'name': '20030514 PalmOS ICMP flood DoS.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105293128612131&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0293?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0294 mean in the context of cybersecurity?

[Assistant] CVE-2003-0294


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0294.

[Assistant] autohtml.php in php-proxima 6.0 and earlier allows remote attackers to read arbitrary files via the name parameter in a modload operation.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0294?

[Assistant] {'name': '20030514 php-proxima Remote File Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105293834421549&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0294?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0295 mean in the context of cybersecurity?

[Assistant] CVE-2003-0295


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0295.

[Assistant] Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0295?

[Assistant] {'name': '20030514 Re: VBulletin Preview Message - XSS Vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105293890422210&w=2'}, {'name': '20030514 VBulletin Preview Message - XSS Vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105292832607981&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0295?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0296 mean in the context of cybersecurity?

[Assistant] CVE-2003-0296


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0296.

[Assistant] The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0296?

[Assistant] {'name': '20030514 Buffer overflows in multiple IMAP clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105294024124163&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0296?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0297 mean in the context of cybersecurity?

[Assistant] CVE-2003-0297


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0297.

[Assistant] c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0297?

[Assistant] {'name': 'FLSA:184074', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/430302/100/0/threaded'}, {'name': 'RHSA-2005:114', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-114.html'}, {'name': 'RHSA-2005:015', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-015.html'}, {'name': '20030514 Buffer overflows in multiple IMAP clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105294024124163&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0297?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0298 mean in the context of cybersecurity?

[Assistant] CVE-2003-0298


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0298.

[Assistant] The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large (1) literal and possibly (2) mailbox size values that cause either integer signedness errors or integer overflow errors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0298?

[Assistant] {'name': '20030514 Buffer overflows in multiple IMAP clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105294024124163&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0298?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0299 mean in the context of cybersecurity?

[Assistant] CVE-2003-0299


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0299.

[Assistant] The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large mailbox size values that cause either integer signedness errors or integer overflow errors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0299?

[Assistant] {'name': '20030514 Buffer overflows in multiple IMAP clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105294024124163&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0299?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0300 mean in the context of cybersecurity?

[Assistant] CVE-2003-0300


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0300.

[Assistant] The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0300?

[Assistant] {'name': '20030514 Buffer overflows in multiple IMAP clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105294024124163&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0300?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0301 mean in the context of cybersecurity?

[Assistant] CVE-2003-0301


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0301.

[Assistant] The IMAP Client for Outlook Express 6.00.2800.1106 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0301?

[Assistant] {'name': '20030514 Buffer overflows in multiple IMAP clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105294024124163&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0301?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0302 mean in the context of cybersecurity?

[Assistant] CVE-2003-0302


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0302.

[Assistant] The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0302?

[Assistant] {'name': '20030514 Buffer overflows in multiple IMAP clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105294024124163&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0302?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0303 mean in the context of cybersecurity?

[Assistant] CVE-2003-0303


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0303.

[Assistant] SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0303?

[Assistant] {'name': '7609', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7609'}, {'name': '20030515 OneOrZero Security Problems (PHP)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0070.html'}, {'name': '20030515 OneOrZero Security Problems (PHP)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105302025601231&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0303?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0304 mean in the context of cybersecurity?

[Assistant] CVE-2003-0304


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0304.

[Assistant] one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0304?

[Assistant] {'name': '20030515 OneOrZero Security Problems (PHP)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0070.html'}, {'name': '20030515 OneOrZero Security Problems (PHP)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105302025601231&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0304?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0305 mean in the context of cybersecurity?

[Assistant] CVE-2003-0305


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0305.

[Assistant] The Service Assurance Agent (SAA) in Cisco IOS 12.0 through 12.2, aka Response Time Reporter (RTR), allows remote attackers to cause a denial of service (crash) via malformed RTR packets to port 1967.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0305?

[Assistant] {'name': 'oval:org.mitre.oval:def:5608', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5608'}, {'name': '20030515 Cisco Security Advisory: Cisco IOS Software Processing of SAA Packets', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20030515-saa.shtml'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0305?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0306 mean in the context of cybersecurity?

[Assistant] CVE-2003-0306


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0306.

[Assistant] Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.ini file with a long .ShellClassInfo parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0306?

[Assistant] {'name': 'MS03-027', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-027'}, {'name': '20030511 Detailed analysis: Buffer overflow in Explorer.exe on Windows XP SP1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105284486526310&w=2'}, {'name': 'oval:org.mitre.oval:def:3095', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3095'}, {'name': '20030515 Re[2]: EXPLOIT: Buffer overflow in Explorer.exe on Windows XP SP1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105301349925036&w=2'}, {'name': '20030507 Buffer overflow in Explorer.exe', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=105241032526289&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0306?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0307 mean in the context of cybersecurity?

[Assistant] CVE-2003-0307


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0307.

[Assistant] Poster version.two allows remote authenticated users to gain administrative privileges by appending the "|" field separator and an "admin" value into the email address field.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0307?

[Assistant] {'name': "20030514 [VULNERABILITY] PHP 'poster version.two'", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105295155004969&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0307?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0308 mean in the context of cybersecurity?

[Assistant] CVE-2003-0308


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0308.

[Assistant] The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0308?

[Assistant] {'name': 'DSA-305', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-305'}, {'name': '[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2008/10/30/2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev.gentoo.org/~rbu/security/debiantemp/sendmail-base'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/496408'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.gentoo.org/show_bug.cgi?id=235770'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0308?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0309 mean in the context of cybersecurity?

[Assistant] CVE-2003-0309


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0309.

[Assistant] Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which eventually cause Internet Explorer to execute the program, as demonstrated using a large number of FRAME or IFRAME tags, aka the "File Download Dialog Vulnerability."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0309?

[Assistant] {'name': '20030508 Flooding Internet Explorer 6.0.2800 (6.x?) security zones ! [CRITICAL]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105249399103214&w=2'}, {'name': 'VU#251788', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/251788'}, {'name': 'oval:org.mitre.oval:def:948', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A948'}, {'name': '8807', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8807'}, {'name': '20030513 Flooding Internet Explorer 6.0.2800 (6.x?) security zones  ! - UPDATED', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=105294162726096&w=2'}, {'name': '7539', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7539'}, {'name': '20030513 Flooding Internet Explorer 6.0.2800 (6.x?) security zones  ! - UPDATED', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105294081325040&w=2'}, {'name': 'MS03-020', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-020'}, {'name': 'ie-frame-restrictions-bypass(12019)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12019'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0309?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0310 mean in the context of cybersecurity?

[Assistant] CVE-2003-0310


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0310.

[Assistant] Cross-site scripting (XSS) vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0310?

[Assistant] {'name': '20030516 EzPublish Directory XSS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105310013606680&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0310?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0312 mean in the context of cybersecurity?

[Assistant] CVE-2003-0312


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0312.

[Assistant] Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0312?

[Assistant] {'name': '20030516 Snowblind Web Server: multiple issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105311719128173&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0312?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0313 mean in the context of cybersecurity?

[Assistant] CVE-2003-0313


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0313.

[Assistant] Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to list arbitrary directory contents via a ... (triple dot) in an HTTP request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0313?

[Assistant] {'name': '20030516 Snowblind Web Server: multiple issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105311719128173&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0313?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0314 mean in the context of cybersecurity?

[Assistant] CVE-2003-0314


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0314.

[Assistant] Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) via a URL that ends in a "</" sequence.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0314?

[Assistant] {'name': '20030516 Snowblind Web Server: multiple issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105311719128173&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0314?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0315 mean in the context of cybersecurity?

[Assistant] CVE-2003-0315


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0315.

[Assistant] Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP request, which may trigger a buffer overflow.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0315?

[Assistant] {'name': '20030516 Snowblind Web Server: multiple issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105311719128173&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0315?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0316 mean in the context of cybersecurity?

[Assistant] CVE-2003-0316


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0316.

[Assistant] Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for various protocols, including an open relay for SMTP, which allows it to be abused by spammers.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0316?

[Assistant] {'name': '20030516 Venturi Client 2.1 confirmed as open relay [Verizon Wireless Mobile Office]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-05/0188.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.venturiwireless.com/tech_support/Q_and_A/Q_A_09.htm'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0316?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0317 mean in the context of cybersecurity?

[Assistant] CVE-2003-0317


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0317.

[Assistant] iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded characters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0317?

[Assistant] {'name': '20030522 Authentication Bypass in iisPROTECT', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=25'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0317?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0318 mean in the context of cybersecurity?

[Assistant] CVE-2003-0318


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0318.

[Assistant] Cross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier allows remote attackers to insert arbitrary web script via the year parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0318?

[Assistant] {'name': '20030517 PHP-Nuke code injection in Yearly Stats at Statistics module', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105319538308834&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0318?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0319 mean in the context of cybersecurity?

[Assistant] CVE-2003-0319


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0319.

[Assistant] Buffer overflow in the IMAP server (IMAPMax) for SmartMax MailMax 5.0.10.8 and earlier allows remote authenticated users to execute arbitrary code via a long SELECT command.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0319?

[Assistant] {'name': '20030517 Buffer overflow vulnerability found in MailMax version 5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105319299407291&w=2'}, {'name': '20030517 Buffer overflow vulnerability found in MailMax version 5', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0072.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0319?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0320 mean in the context of cybersecurity?

[Assistant] CVE-2003-0320


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0320.

[Assistant] header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms_user_admin parameter to "1" and modifying the admin_root parameter to point to a URL that contains a Trojan horse header.inc.php script.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0320?

[Assistant] {'name': '20030517 Remote code execution in ttCMS <=v2.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105320172212990&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0320?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0321 mean in the context of cybersecurity?

[Assistant] CVE-2003-0321


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0321.

[Assistant] Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions (1) send_ctcp, (2) cannot_join_channel, (3) cluster, (4) BX_compress_modes, (5) handle_oper_vision, and (6) ban_it.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0321?

[Assistant] {'name': '7096', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7096'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.debian.org/pool/updates/main/i/ircii-pana/ircii-pana_1.0-0c16-2.1.diff.gz'}, {'name': '7097', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7097'}, {'name': 'CLA-2003:655', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000655'}, {'name': '20030324 GLSA:  bitchx (200303-21)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104852615211913&w=2'}, {'name': 'DSA-306', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-306'}, {'name': '20030313 Buffer overflows in ircII-based clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104766521328322&w=2'}, {'name': '7100', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7100'}, {'name': '7099', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7099'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0321?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0322 mean in the context of cybersecurity?

[Assistant] CVE-2003-0322


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0322.

[Assistant] Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service (crash).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0322?

[Assistant] {'name': 'DSA-306', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-306'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.debian.org/pool/updates/main/i/ircii-pana/ircii-pana_1.0-0c16-2.1.diff.gz'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0322?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0323 mean in the context of cybersecurity?

[Assistant] CVE-2003-0323


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0323.

[Assistant] Multiple buffer overflows in ircII 20020912 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via responses that are not properly fed to the my_strcat function by (1) ctcp_buffer, (2) cannot_join_channel, (3) status_make_printable for Statusbar drawing, (4) create_server_list, and possibly other functions.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0323?

[Assistant] {'name': 'DSA-298', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-298'}, {'name': '7098', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7098'}, {'name': 'DSA-291', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-291'}, {'name': '20030313 Buffer overflows in ircII-based clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104766521328322&w=2'}, {'name': '20030319 [OpenPKG-SA-2003.024] OpenPKG Security Advisory (ircii)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104808915402926&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0323?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0324 mean in the context of cybersecurity?

[Assistant] CVE-2003-0324


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0324.

[Assistant] Buffer overflows in EPIC IRC Client (EPIC4) 1.0.1 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long replies that are not properly handled by the (1) userhost_cmd_returned function, or (2) Statusbar capability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0324?

[Assistant] {'name': 'DSA-287', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-287'}, {'name': '7091', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7091'}, {'name': '20030313 Buffer overflows in ircII-based clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104766521328322&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0324?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0325 mean in the context of cybersecurity?

[Assistant] CVE-2003-0325


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0325.

[Assistant] Buffer overflow in Maelstrom 3.0.6, 3.0.5, and earlier allows local users to execute arbitrary code via a long -server command line argument.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0325?

[Assistant] {'name': '20030520 Maelstrom Local Buffer Overflow Exploit, FreeBSD 4.8 edition', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105346309123217&w=2'}, {'name': '20030518 Maelstrom Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105337792703887&w=2'}, {'name': '20030519 Maelstrom exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105344501331344&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0325?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0326 mean in the context of cybersecurity?

[Assistant] CVE-2003-0326


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0326.

[Assistant] Integer overflow in parse_decode_path() of slocate may allow attackers to execute arbitrary code via a LOCATE_PATH with a large number of ":" (colon) characters, whose count is used in a call to malloc.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0326?

[Assistant] {'name': '20030519 bazarr slocate', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105337692202626&w=2'}, {'name': '7629', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7629'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0326?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0327 mean in the context of cybersecurity?

[Assistant] CVE-2003-0327


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0327.

[Assistant] Sybase Adaptive Server Enterprise (ASE) 12.5 allows remote attackers to cause a denial of service (hang) via a remote password array with an invalid length, which triggers a heap-based buffer overflow.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0327?

[Assistant] {'name': 'sybase-passwordarray-bo(13800)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13800'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/advisories/R7-0016.html'}, {'name': '20031120 R7-0016: Sybase ASE 12.5 Remote Password Array Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106936096103805&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0327?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0328 mean in the context of cybersecurity?

[Assistant] CVE-2003-0328


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0328.

[Assistant] EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0328?

[Assistant] {'name': 'DSA-399', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-399'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.prbh.org/pub/epic/patches/alloca_underrun-patch-1'}, {'name': 'DSA-306', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-306'}, {'name': 'RHSA-2003:342', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-342.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0328?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0329 mean in the context of cybersecurity?

[Assistant] CVE-2003-0329


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0329.

[Assistant] CesarFTP 0.99g stores user names and passwords in plaintext in the settings.ini file, which could allow local users to gain privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0329?

[Assistant] {'name': '20030520 Plaintext Password in Settings.ini of CesarFTP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105344578100315&w=2'}, {'name': '20030520 Plaintext Password in Settings.ini of CesarFTP', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0074.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0329?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0330 mean in the context of cybersecurity?

[Assistant] CVE-2003-0330


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0330.

[Assistant] Buffer overflow in unknown versions of Maelstrom allows local users to execute arbitrary code via a long -player command line argument.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0330?

[Assistant] {'name': '1008832', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1008832'}, {'name': '20030520 Maelstrom Local Buffer Overflow Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105344891005369&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0330?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0331 mean in the context of cybersecurity?

[Assistant] CVE-2003-0331


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0331.

[Assistant] SQL injection vulnerability in ttForum allows remote attackers to execute arbitrary SQL and gain ttForum Administrator privileges via the Ignorelist-Textfield argument in the Preferences page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0331?

[Assistant] {'name': '20030520 More vulnerabilities in ttForum/ttCMS -> SQL injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105345273210334&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0331?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0332 mean in the context of cybersecurity?

[Assistant] CVE-2003-0332


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0332.

[Assistant] The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a security check, which allows remote attackers to bypass authentication via a filename with a .ats extension instead of a .hts extension.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0332?

[Assistant] {'name': '20030520 BadBlue Remote Administrative Interface Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105346382524169&w=2'}, {'name': '20030520 BadBlue Remote Administrative Interface Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0075.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0332?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0333 mean in the context of cybersecurity?

[Assistant] CVE-2003-0333


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0333.

[Assistant] Multiple buffer overflows in kermit in HP-UX 10.20 and 11.00 (C-Kermit 6.0.192 and possibly other versions before 8.0) allow local users to gain privileges via long arguments to (1) ask, (2) askq, (3) define, (4) assign, and (5) getc, some of which may share the same underlying function "doask," a different vulnerability than CVE-2001-0085.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0333?

[Assistant] {'name': '7627', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7627'}, {'name': '20030502 Re: from bugtraq: HP-UX 11.0 /usr/bin/kermit (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105190667523456&w=2'}, {'name': '20030502 HP-UX 11.0 /usr/bin/kermit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105189670912220&w=2'}, {'name': 'HPSBUX0305-259', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/current/0044.html'}, {'name': 'VU#971364', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/971364'}, {'name': 'hp-ckermit-bo(11929)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11929'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0333?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0334 mean in the context of cybersecurity?

[Assistant] CVE-2003-0334


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0334.

[Assistant] BitchX IRC client 1.0c20cvs and earlier allows attackers to cause a denial of service (core dump) via certain channel mode changes that are not properly handled in names.c.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0334?

[Assistant] {'name': 'bitchx-mode-change-dos(12008)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12008'}, {'name': '7551', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7551'}, {'name': '20030510 BitchX: Crash when channel modes change', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105259643606984&w=2'}, {'name': 'MDKSA-2003:069', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:069'}, {'name': 'CLA-2003:655', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000655'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0334?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0335 mean in the context of cybersecurity?

[Assistant] CVE-2003-0335


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0335.

[Assistant] rc.M in Slackware 9.0 calls quotacheck with the -M option, which causes the filesystem to be remounted and possibly reset security-relevant mount flags such as nosuid, nodev, and noexec.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0335?

[Assistant] {'name': '20030522 [slackware-security]  quotacheck security fix in rc.M (SSA:2003-141-06)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105361968110719&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0335?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0336 mean in the context of cybersecurity?

[Assistant] CVE-2003-0336


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0336.

[Assistant] Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a carriage return (CR) character in a spoofed "Attachment Converted:" string, which is not properly handled by Eudora.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0336?

[Assistant] {'name': '20030522 Eudora 5.2.1 attachment spoof', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105362278914731&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0336?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0337 mean in the context of cybersecurity?

[Assistant] CVE-2003-0337


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0337.

[Assistant] The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute arbitrary programs by modifying the LSF_ENVDIR environment variable to reference an alternate lsf.conf file, then modifying LSF_SERVERDIR to point to a malicious lim program, which lsadmin then executes.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0337?

[Assistant] {'name': '20030522 Security advisory: LSF 5.1 local root exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105361879109409&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0337?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0338 mean in the context of cybersecurity?

[Assistant] CVE-2003-0338


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0338.

[Assistant] Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequences in HTTP GET or POST requests.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0338?

[Assistant] {'name': '20030521 [INetCop Security Advisory] WsMP3d Directory Traversing Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0077.html'}, {'name': '20030521 [INetCop Security Advisory] WsMP3d Directory Traversing Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105353168619211&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0338?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0339 mean in the context of cybersecurity?

[Assistant] CVE-2003-0339


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0339.

[Assistant] Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HTTP requests.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0339?

[Assistant] {'name': '20030521 Remote Heap Corruption Overflow vulnerability in WsMp3d.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105353178019353&w=2'}, {'name': '20030521 Remote Heap Corruption Overflow vulnerability in WsMp3d.', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://marc.info/?l=bugtraq&m=105353178019353&w=2'}, {'name': '20030522 WsMp3d remote exploit.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105361764807746&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0339?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0340 mean in the context of cybersecurity?

[Assistant] CVE-2003-0340


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0340.

[Assistant] Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, which allows attackers to steal login names and passwords to gain privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0340?

[Assistant] {'name': '20030521 Demarc Puresecure v1.6 - Plaintext password issue -', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2003-05/0230.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0340?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0341 mean in the context of cybersecurity?

[Assistant] CVE-2003-0341


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0341.

[Assistant] Cross-site scripting (XSS) vulnerability in Owl Intranet Engine 0.71 and earlier allows remote attackers to insert arbitrary script via the Search field.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0341?

[Assistant] {'name': '20030521 [AP] Owl Intranet Engine CSS Bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105353266220520&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0341?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0342 mean in the context of cybersecurity?

[Assistant] CVE-2003-0342


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0342.

[Assistant] BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, which can allow local users to gain privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0342?

[Assistant] {'name': '20030520 [[ TH 026 Inc. ]] SA #4 - Blackmoon FTP Server cleartext passwords and User enumeration', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105353283720837&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0342?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0343 mean in the context of cybersecurity?

[Assistant] CVE-2003-0343


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0343.

[Assistant] BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid username is entered, which makes it easier for remote attackers to conduct brute force attacks.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0343?

[Assistant] {'name': '20030520 [[ TH 026 Inc. ]] SA #4 - Blackmoon FTP Server cleartext passwords and User enumeration', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105353283720837&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0343?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0344 mean in the context of cybersecurity?

[Assistant] CVE-2003-0344


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0344.

[Assistant] Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0344?

[Assistant] {'name': '20030604 Internet Explorer Object Type Property Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105476381609135&w=2'}, {'name': '8943', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8943'}, {'name': 'oval:org.mitre.oval:def:922', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A922'}, {'name': '20030709 IE Object Type Overflow Exploit', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006401.html'}, {'name': 'MS03-020', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-020'}, {'name': 'AD20030604', 'tags': ['third-party-advisory', 'x_refsource_EEYE'], 'url': 'http://www.eeye.com/html/Research/Advisories/AD20030604.html'}, {'name': 'VU#679556', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/679556'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0344?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0345 mean in the context of cybersecurity?

[Assistant] CVE-2003-0345


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0345.

[Assistant] Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB packet that specifies a smaller buffer length than is required.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0345?

[Assistant] {'name': 'VU#337764', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/337764'}, {'name': '9225', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/9225'}, {'name': 'oval:org.mitre.oval:def:146', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A146'}, {'name': 'oval:org.mitre.oval:def:118', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A118'}, {'name': 'oval:org.mitre.oval:def:3391', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3391'}, {'name': 'win-smb-bo(12544)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12544'}, {'name': 'MS03-024', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-024'}, {'name': '8152', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8152'}, {'name': '1007154', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1007154'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0345?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0346 mean in the context of cybersecurity?

[Assistant] CVE-2003-0346


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0346.

[Assistant] Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with (1) large length for a Text or Copyright string, or (2) a large number of tracks, which leads to a heap-based buffer overflow.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2003-0346?

[Assistant] {'name': 'oval:org.mitre.oval:def:218', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A218'}, {'name': 'VU#561284', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/561284'}, {'name': 'CA-2003-18', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2003-18.html'}, {'name': 'oval:org.mitre.oval:def:1104', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1104'}, {'name': 'VU#265232', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/265232'}, {'name': 'oval:org.mitre.oval:def:1095', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1095'}, {'name': '20030723 EEYE: Windows MIDI Decoder (QUARTZ.DLL) Heap Corruption', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105899759824008&w=2'}, {'name': 'MS03-030', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-030'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0346?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2003-0347 mean in the context of cybersecurity?

[Assistant] CVE-2003-0347


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0347.

[Assistant] Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter.