Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0852.

Format string vulnerability in send_message.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP servers to cause a denial of service (crash) in sylpheed via format strings in an error message.


Provide references for further information: Can you share references or external links related to CVE-2003-0852?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sylpheed.good-day.net/#changes'}, {'name': '8877', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8877'}, {'name': '20031022 Sylpheed-claws format string bug, yet still sylpheed much better than windows', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012542.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/sylph.html'}, {'name': 'sylpheed-smtp-format-string(13508)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13508'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0852?


Explain the CVE ID: What does the identifier CVE-2003-0853 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0853.

An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.


Provide references for further information: Can you share references or external links related to CVE-2003-0853?

{'name': 'CLA-2003:771', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000771'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2005-213.pdf'}, {'name': 'CLA-2003:768', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000768'}, {'name': '20031022 Fun with /bin/ls, yet still ls better than windows', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012548.html'}, {'name': 'RHSA-2003:309', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-309.html'}, {'name': 'TLSA-2003-60', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/security/TLSA-2003-60.txt'}, {'name': 'RHSA-2003:310', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-310.html'}, {'name': '8875', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8875'}, {'name': 'IMNX-2003-7+-026-01', 'tags': ['vendor-advisory', 'x_refsource_IMMUNIX'], 'url': 'http://www.securityfocus.com/advisories/6014'}, {'name': '17069', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17069'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/binls.html'}, {'name': '10126', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10126'}, {'name': 'MDKSA-2003:106', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:106'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0853?


Explain the CVE ID: What does the identifier CVE-2003-0854 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0854.

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.


Provide references for further information: Can you share references or external links related to CVE-2003-0854?

{'name': 'DSA-705', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-705'}, {'name': 'CLA-2003:771', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000771'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2005-213.pdf'}, {'name': '115', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/115'}, {'name': 'CLA-2003:768', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000768'}, {'name': '20031022 Fun with /bin/ls, yet still ls better than windows', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012548.html'}, {'name': 'RHSA-2003:309', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-309.html'}, {'name': 'TLSA-2003-60', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/security/TLSA-2003-60.txt'}, {'name': 'RHSA-2003:310', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-310.html'}, {'name': 'IMNX-2003-7+-026-01', 'tags': ['vendor-advisory', 'x_refsource_IMMUNIX'], 'url': 'http://www.securityfocus.com/advisories/6014'}, {'name': '17069', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17069'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/binls.html'}, {'name': '10126', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10126'}, {'name': 'MDKSA-2003:106', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:106'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0854?


Explain the CVE ID: What does the identifier CVE-2003-0855 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0855.

Pan 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news post with a long author email address.


Provide references for further information: Can you share references or external links related to CVE-2003-0855?

{'name': '20040202-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc'}, {'name': 'RHSA-2003:312', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-312.html'}, {'name': 'RHSA-2003:311', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-311.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=107519'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.gnome.org/show_bug.cgi?id=107025'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0855?


Explain the CVE ID: What does the identifier CVE-2003-0856 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0856.

iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as other users to the kernel netlink interface.


Provide references for further information: Can you share references or external links related to CVE-2003-0856?

{'name': 'RHSA-2003:316', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-316.html'}, {'name': 'DSA-492', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-492'}, {'name': 'oval:org.mitre.oval:def:10912', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10912'}, {'name': 'RHSA-2003:317', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-317.html'}, {'name': 'FEDORA-2004-115', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00004.html'}, {'name': 'SUSE-SR:2005:001', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_01_sr.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0856?


Explain the CVE ID: What does the identifier CVE-2003-0857 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0857.

The (1) ipq_read and (2) ipulog_read functions in iptables allow local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.


Provide references for further information: Can you share references or external links related to CVE-2003-0857?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=108574'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0857?


Explain the CVE ID: What does the identifier CVE-2003-0858 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0858.

Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.


Provide references for further information: Can you share references or external links related to CVE-2003-0858?

{'name': 'RHSA-2003:315', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-315.html'}, {'name': 'RHSA-2003:305', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-305.html'}, {'name': 'DSA-415', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-415'}, {'name': '10563', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10563'}, {'name': 'oval:org.mitre.oval:def:10169', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10169'}, {'name': 'RHSA-2003:307', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-307.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0858?


Explain the CVE ID: What does the identifier CVE-2003-0859 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0859.

The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.


Provide references for further information: Can you share references or external links related to CVE-2003-0859?

{'name': 'oval:org.mitre.oval:def:11337', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11337'}, {'name': 'RHSA-2003:325', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-325.html'}, {'name': 'RHSA-2003:334', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-334.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0859?


Explain the CVE ID: What does the identifier CVE-2003-0860 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0860.

Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2003-0860?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/release_4_3_3.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/ChangeLog-4.php#4.3.3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0860?


Explain the CVE ID: What does the identifier CVE-2003-0861 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0861.

Integer overflows in (1) base64_encode and (2) the GD library for PHP before 4.3.3 have unknown impact and unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2003-0861?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0861?


Explain the CVE ID: What does the identifier CVE-2003-0862 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0862.


Provide references for further information: Can you share references or external links related to CVE-2003-0862?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0862?


Explain the CVE ID: What does the identifier CVE-2003-0863 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0863.

The php_check_safe_mode_include_dir function in fopen_wrappers.c of PHP 4.3.x returns a success value (0) when the safe_mode_include_dir variable is not specified in configuration, which differs from the previous failure value and may allow remote attackers to exploit file include vulnerabilities in PHP applications.


Provide references for further information: Can you share references or external links related to CVE-2003-0863?

{'name': '20030716 PHP safe mode broken?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105839111204227'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0863?


Explain the CVE ID: What does the identifier CVE-2003-0864 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0864.

Buffer overflow in m_join in channel.c for IRCnet IRCD 2.10.x to 2.10.3p3 allows remote attackers to cause a denial of service.


Provide references for further information: Can you share references or external links related to CVE-2003-0864?

{'name': '8817', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8817'}, {'name': 'CLA-2003:765', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000765'}, {'name': '20031019 [OpenPKG-SA-2003.045] OpenPKG Security Advisory (ircd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106667431021928&w=2'}, {'name': 'ircd-mjoin-bo(13408)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13408'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.irc.org/irc/server/ChangeLog'}, {'name': '20031012 buffer overflow in IRCD software', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106606129601446&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0864?


Explain the CVE ID: What does the identifier CVE-2003-0865 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0865.

Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a long request.


Provide references for further information: Can you share references or external links related to CVE-2003-0865?

{'name': 'CSSA-2004-002.0', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-002.0/CSSA-2004-002.0.txt'}, {'name': 'DSA-435', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-435'}, {'name': 'CLA-2003:781', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000781'}, {'name': '8680', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8680'}, {'name': '20030930 GLSA:  mpg123 (200309-17)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106493686331198&w=2'}, {'name': '20030923 mpg123[v0.59r,v0.59s]: remote client-side heap corruption exploit.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/338641'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0865?


Explain the CVE ID: What does the identifier CVE-2003-0866 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0866.

The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.


Provide references for further information: Can you share references or external links related to CVE-2003-0866?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://tomcat.apache.org/security-4.html'}, {'name': '30908', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30908'}, {'name': '8824', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8824'}, {'name': '239312', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1'}, {'name': '30899', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30899'}, {'name': 'ADV-2008-1979', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1979/references'}, {'name': 'DSA-395', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-395'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=215506'}, {'name': 'tomcat-non-http-dos(13429)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13429'}, {'name': '[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0866?


Explain the CVE ID: What does the identifier CVE-2003-0867 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0867.


Provide references for further information: Can you share references or external links related to CVE-2003-0867?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0867?


Explain the CVE ID: What does the identifier CVE-2003-0868 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0868.


Provide references for further information: Can you share references or external links related to CVE-2003-0868?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0868?


Explain the CVE ID: What does the identifier CVE-2003-0869 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0869.


Provide references for further information: Can you share references or external links related to CVE-2003-0869?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0869?


Explain the CVE ID: What does the identifier CVE-2003-0870 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0870.

Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name.


Provide references for further information: Can you share references or external links related to CVE-2003-0870?

{'name': '8853', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8853'}, {'name': 'opera-escape-heap-overflow(13458)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13458'}, {'name': '20031020 Opera HREF escaped server name overflow', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0016.html'}, {'name': 'A102003-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a102003-1.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0870?


Explain the CVE ID: What does the identifier CVE-2003-0871 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0871.

Unknown vulnerability in QuickTime Java in Mac OS X v10.3 and Mac OS X Server 10.3 allows attackers to gain "unauthorized access to a system."


Provide references for further information: Can you share references or external links related to CVE-2003-0871?

{'name': 'APPLE-SA-2003-10-28', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00039.html'}, {'name': '8922', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8922'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0871?


Explain the CVE ID: What does the identifier CVE-2003-0872 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0872.

Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2003-0872?

{'name': '8864', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8864'}, {'name': 'CSSA-2003-SCO.27', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.27/CSSA-2003-SCO.27.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0872?


Explain the CVE ID: What does the identifier CVE-2003-0873 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0873.


Provide references for further information: Can you share references or external links related to CVE-2003-0873?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0873?


Explain the CVE ID: What does the identifier CVE-2003-0874 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0874.

Multiple SQL injection vulnerabilities in DeskPRO 1.1.0 and earlier allow remote attackers to insert arbitrary SQL and conduct unauthorized activities via (1) the cat parameter in faq.php, (2) the article parameter in faq.php, (3) the tickedid parameter in view.php, and (4) the Password entry on the logon screen.


Provide references for further information: Can you share references or external links related to CVE-2003-0874?

{'name': 'deskpro-multiple-sql-injection(13391)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13391'}, {'name': '20031020 Multiple SQL Injection Vulnerabilities in DeskPRO', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106667525623311&w=2'}, {'name': '20031020 Multiple SQL Injection Vulnerabilities in DeskPRO', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0017.html'}, {'name': '8856', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8856'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/unixfocus/6R0052K8KM.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0874?


Explain the CVE ID: What does the identifier CVE-2003-0875 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0875.

Symbolic link vulnerability in the slpd script slpd.all_init for OpenSLP before 1.0.11 allows local users to overwrite arbitrary files via the route.check temporary file.


Provide references for further information: Can you share references or external links related to CVE-2003-0875?

{'name': '20030818 OpenSLP initscript symlink vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106123103606336&w=2'}, {'name': 'CLA-2003:723', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000723'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0875?


Explain the CVE ID: What does the identifier CVE-2003-0876 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0876.

Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (copied) from a mounted volume such as a disk image (DMG), which could cause the directories to have less restrictive permissions than intended.


Provide references for further information: Can you share references or external links related to CVE-2003-0876?

{'name': '8917', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8917'}, {'name': 'A102803-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a102803-1.txt'}, {'name': '8916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8916'}, {'name': 'macos-insecure-file-permissions(13537)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13537'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0876?


Explain the CVE ID: What does the identifier CVE-2003-0877 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0877.

Mac OS X before 10.3 with core files enabled allows local users to overwrite arbitrary files and read core files via a symlink attack on core files that are created with predictable names in the /cores directory.


Provide references for further information: Can you share references or external links related to CVE-2003-0877?

{'name': 'macos-core-files-symlink(13542)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13542'}, {'name': '8917', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8917'}, {'name': 'A102803-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a102803-1.txt'}, {'name': '8914', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8914'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0877?


Explain the CVE ID: What does the identifier CVE-2003-0878 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0878.

slpd daemon in Mac OS X before 10.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2003-0875.


Provide references for further information: Can you share references or external links related to CVE-2003-0878?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00038.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=61798'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0878?


Explain the CVE ID: What does the identifier CVE-2003-0879 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0879.


Provide references for further information: Can you share references or external links related to CVE-2003-0879?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0879?


Explain the CVE ID: What does the identifier CVE-2003-0880 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0880.

Unknown vulnerability in Mac OS X before 10.3 allows local users to access Dock functions from behind Screen Effects when Full Keyboard Access is enabled using the Keyboard pane in System Preferences.


Provide references for further information: Can you share references or external links related to CVE-2003-0880?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0880?


Explain the CVE ID: What does the identifier CVE-2003-0881 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0881.

Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by sniffing the password.


Provide references for further information: Can you share references or external links related to CVE-2003-0881?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0881?


Explain the CVE ID: What does the identifier CVE-2003-0882 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0882.

Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet.


Provide references for further information: Can you share references or external links related to CVE-2003-0882?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0882?


Explain the CVE ID: What does the identifier CVE-2003-0883 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0883.

The System Preferences capability in Mac OS X before 10.3 allows local users to access secure Preference Panes for a short period after an administrator has authenticated to the system.


Provide references for further information: Can you share references or external links related to CVE-2003-0883?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0883?


Explain the CVE ID: What does the identifier CVE-2003-0885 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0885.

Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the (1) apple2, (2) xanalogtv, and (3) pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack.


Provide references for further information: Can you share references or external links related to CVE-2003-0885?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=182286'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=41253'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0885?


Explain the CVE ID: What does the identifier CVE-2003-0886 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0886.

Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2003-0886?

{'name': 'DSA-401', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-401'}, {'name': 'CLA-2003:783', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000783'}, {'name': '20031111 HylaFAX - Format String Vulnerability Fixed', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106858898708752&w=2'}, {'name': 'SuSE-SA:2003:045', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_045_hylafax.html'}, {'name': 'MDKSA-2003:105', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:105'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0886?


Explain the CVE ID: What does the identifier CVE-2003-0887 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0887.

ez-ipupdate 3.0.11b7 and earlier creates insecure temporary cache files, which allows local users to conduct unauthorized operations via a symlink attack on the ez-ipupdate.cache file.


Provide references for further information: Can you share references or external links related to CVE-2003-0887?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.mandriva.com/cgi-bin/viewcvs.cgi/SPECS/ez-ipupdate/ez-ipupdate.spec?r1=1.4&r2=1.5'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.mandriva.com/cgi-bin/viewcvs.cgi/SPECS/ez-ipupdate/ez-ipupdate.spec?rev=1.6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0887?


Explain the CVE ID: What does the identifier CVE-2003-0894 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0894.

Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execute arbitrary code via a long command line argument.


Provide references for further information: Can you share references or external links related to CVE-2003-0894?

{'name': '8844', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8844'}, {'name': '8845', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8845'}, {'name': 'VU#496340', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/496340'}, {'name': 'oracle-oracleo-binaries-bo(13451)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13451'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/2003alert59.pdf'}, {'name': '1007956', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1007956'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0894?


Explain the CVE ID: What does the identifier CVE-2003-0895 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0895.

Buffer overflow in the Mac OS X kernel 10.2.8 and earlier allows local users, and possibly remote attackers, to cause a denial of service (crash), access portions of memory, and possibly execute arbitrary code via a long command line argument (argv[]).


Provide references for further information: Can you share references or external links related to CVE-2003-0895?

{'name': 'A102803-3', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a102803-3.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00038.html'}, {'name': '8913', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8913'}, {'name': 'macos-long-command-bo(13541)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13541'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0895?


Explain the CVE ID: What does the identifier CVE-2003-0896 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0896.

The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager's checkPackageAccess method.


Provide references for further information: Can you share references or external links related to CVE-2003-0896?

{'name': '8879', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8879'}, {'name': "20031027 Re: [LSD] Security vulnerability in SUN's Java Virtual Machineimplementation", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/342583'}, {'name': '57221', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57221'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lsd-pl.net/code/JVM/jre.tar.gz'}, {'name': '200356', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-200356-1'}, {'name': 'HPSBUX0311-295', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/6028'}, {'name': "20031027 Re: [LSD] Security vulnerability in SUN's Java Virtual Machine implementation", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/342580'}, {'name': "20021023 [LSD] Security vulnerability in SUN's Java Virtual Machine implementation", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106692334503819&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0896?


Explain the CVE ID: What does the identifier CVE-2003-0897 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0897.

"Shatter" vulnerability in CommCtl32.dll in Windows XP may allow local users to execute arbitrary code by sending (1) BCM_GETTEXTMARGIN or (2) BCM_SETTEXTMARGIN button control messages to privileged applications.


Provide references for further information: Can you share references or external links related to CVE-2003-0897?

{'name': 'winxp-commctl32-code-execution(13558)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13558'}, {'name': '20031023 Shatter XP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106692772510010&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0897?


Explain the CVE ID: What does the identifier CVE-2003-0898 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0898.

IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and gain privileges via a symlink attack on (1) db2job and (2) db2job2.


Provide references for further information: Can you share references or external links related to CVE-2003-0898?

{'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aixv7/FP10a_U495172/FixpakReadme.txt'}, {'name': '20030805 Local Vulnerability in IBM DB2 7.1 db2job binary', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106010332721672&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0898?


Explain the CVE ID: What does the identifier CVE-2003-0899 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0899.

Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '<' or '>' characters, which trigger the overflow when the characters are expanded to "<" and ">" sequences.


Provide references for further information: Can you share references or external links related to CVE-2003-0899?

{'name': '8906', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8906'}, {'name': 'DSA-396', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2003/dsa-396'}, {'name': '10092', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10092'}, {'name': '2729', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2729'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.texonet.com/advisories/TEXONET-20030908.txt'}, {'name': '20031027 Remote overflow in thttpd', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106729188224252&w=2'}, {'name': 'thttpd-defang-bo(13530)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13530'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0899?


Explain the CVE ID: What does the identifier CVE-2003-0900 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0900.

Perl 5.8.1 on Fedora Core does not properly initialize the random number generator when forking, which makes it easier for attackers to predict random numbers.


Provide references for further information: Can you share references or external links related to CVE-2003-0900?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=108711'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0900?


Explain the CVE ID: What does the identifier CVE-2003-0901 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0901.

Buffer overflow in to_ascii for PostgreSQL 7.2.x, and 7.3.x before 7.3.4, allows remote attackers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2003-0901?

{'name': 'DSA-397', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-397'}, {'name': 'RHSA-2003:314', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-314.html'}, {'name': '8741', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8741'}, {'name': 'CLSA-2003:772', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000772'}, {'name': 'RHSA-2003:313', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-313.html'}, {'name': 'CLA-2003:784', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000784'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://developer.postgresql.org/cvsweb.cgi/pgsql-server/src/backend/utils/adt/ascii.c'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0901?


Explain the CVE ID: What does the identifier CVE-2003-0902 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0902.

Unknown vulnerability in minimalist mailing list manager 2.4, 2.2, and possibly other versions, allows remote attackers to execute arbitrary commands.


Provide references for further information: Can you share references or external links related to CVE-2003-0902?

{'name': 'DSA-402', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-402'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0902?


Explain the CVE ID: What does the identifier CVE-2003-0903 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0903.

Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.


Provide references for further information: Can you share references or external links related to CVE-2003-0903?

{'name': '9407', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9407'}, {'name': 'VU#139150', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/139150'}, {'name': 'oval:org.mitre.oval:def:553', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A553'}, {'name': 'MS04-003', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-003'}, {'name': 'oval:org.mitre.oval:def:751', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A751'}, {'name': '3457', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3457'}, {'name': 'mdac-broadcastrequest-bo(14187)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14187'}, {'name': 'oval:org.mitre.oval:def:525', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A525'}, {'name': 'oval:org.mitre.oval:def:775', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A775'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0903?


Explain the CVE ID: What does the identifier CVE-2003-0904 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0904.

Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.


Provide references for further information: Can you share references or external links related to CVE-2003-0904?

{'name': '9409', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9409'}, {'name': 'VU#530660', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/530660'}, {'name': 'oval:org.mitre.oval:def:477', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A477'}, {'name': '9118', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9118'}, {'name': '10615', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10615'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.microsoft.com/exchange/support/e2k3owa.asp'}, {'name': 'exchange-owa-account-access(13869)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13869'}, {'name': 'MS04-002', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-002'}, {'name': '20031114 Exchange 2003 OWA major security flaw', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0311&L=ntbugtraq&F=P&S=&P=9281'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0904?


Explain the CVE ID: What does the identifier CVE-2003-0905 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0905.

Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remote attackers to cause a denial of service (disallowing new connections) via a certain sequence of TCP/IP packets.


Provide references for further information: Can you share references or external links related to CVE-2003-0905?

{'name': 'win-media-services-dos(15038)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15038'}, {'name': 'VU#982630', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/982630'}, {'name': '9825', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9825'}, {'name': 'oval:org.mitre.oval:def:842', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A842'}, {'name': 'MS04-008', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-008'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0905?


Explain the CVE ID: What does the identifier CVE-2003-0906 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0906.

Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code via a malformed WMF or EMF image.


Provide references for further information: Can you share references or external links related to CVE-2003-0906?

{'name': 'oval:org.mitre.oval:def:897', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A897'}, {'name': 'MS04-011', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011'}, {'name': 'TA04-104A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-104A.html'}, {'name': '10120', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10120'}, {'name': 'oval:org.mitre.oval:def:959', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A959'}, {'name': 'VU#547028', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/547028'}, {'name': 'oval:org.mitre.oval:def:1064', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1064'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0906?


Explain the CVE ID: What does the identifier CVE-2003-0907 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0907.

Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.


Provide references for further information: Can you share references or external links related to CVE-2003-0907?

{'name': 'O-114', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-114.shtml'}, {'name': 'VU#260588', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/260588'}, {'name': '10119', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10119'}, {'name': 'oval:org.mitre.oval:def:1000', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1000'}, {'name': 'MS04-011', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011'}, {'name': 'oval:org.mitre.oval:def:904', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A904'}, {'name': 'TA04-104A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-104A.html'}, {'name': '20040413 Microsoft Help and Support Center argument injection vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020065.html'}, {'name': '20040413 [Full-Disclosure] iDEFENSE Security Advisory 04.13.04 - Microsoft Help and Support', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108196864221676&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/application/poi/display?id=100&type=vulnerabilities'}, {'name': 'win-hcpurl-code-execution(15704)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15704'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0907?


Explain the CVE ID: What does the identifier CVE-2003-0908 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0908.

The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using the File Open dialog in the Help window, a different vulnerability than CVE-2004-0213.


Provide references for further information: Can you share references or external links related to CVE-2003-0908?

{'name': '10124', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10124'}, {'name': 'O-114', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-114.shtml'}, {'name': 'win2k-utilitymgr-gain-privileges(15632)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15632'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.appsecinc.com/resources/alerts/general/04-0001.html'}, {'name': 'MS04-011', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011'}, {'name': 'VU#526084', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/526084'}, {'name': 'TA04-104A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-104A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/5LP0C2ACKU.html'}, {'name': '20040414 [SHATTER Team Security Alert] Microsoft Windows Utility Manager Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0082.html'}, {'name': 'oval:org.mitre.oval:def:1046', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1046'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0908?


Explain the CVE ID: What does the identifier CVE-2003-0909 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0909.

Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe command-line tool or the Task Scheduler service, aka "Windows Management Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2003-0909?

{'name': 'O-114', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-114.shtml'}, {'name': '10125', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10125'}, {'name': 'winxp-task-gain-privileges(15678)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15678'}, {'name': 'VU#206468', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/206468'}, {'name': 'MS04-011', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011'}, {'name': 'TA04-104A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-104A.html'}, {'name': 'oval:org.mitre.oval:def:1004', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1004'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0909?


Explain the CVE ID: What does the identifier CVE-2003-0910 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0910.

The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory.


Provide references for further information: Can you share references or external links related to CVE-2003-0910?

{'name': '20040413 EEYE: Windows Expand-Down Data Segment Local Privilege Escalation', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020068.html'}, {'name': 'oval:org.mitre.oval:def:911', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A911'}, {'name': 'O-114', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-114.shtml'}, {'name': 'oval:org.mitre.oval:def:890', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A890'}, {'name': 'MS04-011', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011'}, {'name': 'AD20040413D', 'tags': ['third-party-advisory', 'x_refsource_EEYE'], 'url': 'http://www.eeye.com/html/Research/Advisories/AD20040413D.html'}, {'name': 'TA04-104A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-104A.html'}, {'name': '10122', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10122'}, {'name': 'win-ldt-gain-privileges(15707)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15707'}, {'name': 'VU#122076', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/122076'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0910?


Explain the CVE ID: What does the identifier CVE-2003-0913 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0913.

Unknown vulnerability in the Terminal application for Mac OS X 10.3 (Client and Server) may allow "unauthorized access."


Provide references for further information: Can you share references or external links related to CVE-2003-0913?

{'name': 'macos-terminal-gain-access(13620)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13620'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=120269'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.apple.com/mhonarc/security-announce/msg00040.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=61798'}, {'name': '8979', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8979'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0913?


Explain the CVE ID: What does the identifier CVE-2003-0914 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0914.

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.


Provide references for further information: Can you share references or external links related to CVE-2003-0914?

{'name': '57434', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57434'}, {'name': 'CSSA-2004-003.0', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-003.0/CSSA-2004-003.0.txt'}, {'name': 'CSSA-2003-SCO.33', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.33/CSSA-2003-SCO.33.txt'}, {'name': '2003-0044', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/misc/2003/TSL-2003-0044-bind.asc.txt'}, {'name': 'VU#734644', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/734644'}, {'name': 'oval:org.mitre.oval:def:2011', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2011'}, {'name': 'DSA-409', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-409'}, {'name': '10542', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10542'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0914?


Explain the CVE ID: What does the identifier CVE-2003-0917 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0917.


Provide references for further information: Can you share references or external links related to CVE-2003-0917?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0917?


Explain the CVE ID: What does the identifier CVE-2003-0918 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0918.


Provide references for further information: Can you share references or external links related to CVE-2003-0918?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0918?


Explain the CVE ID: What does the identifier CVE-2003-0919 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0919.


Provide references for further information: Can you share references or external links related to CVE-2003-0919?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0919?


Explain the CVE ID: What does the identifier CVE-2003-0920 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0920.


Provide references for further information: Can you share references or external links related to CVE-2003-0920?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0920?


Explain the CVE ID: What does the identifier CVE-2003-0921 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0921.


Provide references for further information: Can you share references or external links related to CVE-2003-0921?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0921?


Explain the CVE ID: What does the identifier CVE-2003-0922 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0922.


Provide references for further information: Can you share references or external links related to CVE-2003-0922?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0922?


Explain the CVE ID: What does the identifier CVE-2003-0923 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0923.


Provide references for further information: Can you share references or external links related to CVE-2003-0923?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0923?


Explain the CVE ID: What does the identifier CVE-2003-0924 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0924.

netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.


Provide references for further information: Can you share references or external links related to CVE-2003-0924?

{'name': '20040201-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc'}, {'name': 'MDKSA-2004:011', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:011'}, {'name': 'VU#487102', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/487102'}, {'name': 'RHSA-2004:031', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-031.html'}, {'name': 'oval:org.mitre.oval:def:804', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A804'}, {'name': 'DSA-426', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-426'}, {'name': 'netpbm-temp-insecure-file(14874)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14874'}, {'name': 'oval:org.mitre.oval:def:810', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A810'}, {'name': 'GLSA-200410-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200410-02.xml'}, {'name': '9442', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9442'}, {'name': 'RHSA-2004:030', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-030.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0924?


Explain the CVE ID: What does the identifier CVE-2003-0925 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0925.

Buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed GTP MSISDN string.


Provide references for further information: Can you share references or external links related to CVE-2003-0925?

{'name': 'RHSA-2003:323', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-323.html'}, {'name': 'CLA-2003:780', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000780'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00011.html'}, {'name': 'MDKSA-2003:114', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:114'}, {'name': '8951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8951'}, {'name': '10531', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10531'}, {'name': 'DSA-407', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-407'}, {'name': 'TLSA-2003-64', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/security/TLSA-2003-64.txt'}, {'name': 'oval:org.mitre.oval:def:9692', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9692'}, {'name': 'RHSA-2003:324', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-324.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0925?


Explain the CVE ID: What does the identifier CVE-2003-0926 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0926.

Ethereal 0.9.15 and earlier, and Tethereal, allows remote attackers to cause a denial of service (crash) via certain malformed (1) ISAKMP or (2) MEGACO packets.


Provide references for further information: Can you share references or external links related to CVE-2003-0926?

{'name': 'RHSA-2003:323', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-323.html'}, {'name': 'CLA-2003:780', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000780'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00011.html'}, {'name': 'MDKSA-2003:114', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:114'}, {'name': '8951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8951'}, {'name': '10531', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10531'}, {'name': 'DSA-407', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-407'}, {'name': 'TLSA-2003-64', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/security/TLSA-2003-64.txt'}, {'name': 'oval:org.mitre.oval:def:11648', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11648'}, {'name': 'RHSA-2003:324', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-324.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0926?


Explain the CVE ID: What does the identifier CVE-2003-0927 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0927.

Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SOCKS dissector.


Provide references for further information: Can you share references or external links related to CVE-2003-0927?

{'name': 'RHSA-2003:323', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-323.html'}, {'name': 'CLA-2003:780', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000780'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00011.html'}, {'name': 'MDKSA-2003:114', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:114'}, {'name': '8951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8951'}, {'name': 'ethereal-socks-heap-overflow(13578)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13578'}, {'name': '10531', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10531'}, {'name': 'DSA-407', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-407'}, {'name': 'TLSA-2003-64', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/security/TLSA-2003-64.txt'}, {'name': 'oval:org.mitre.oval:def:9691', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9691'}, {'name': 'RHSA-2003:324', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-324.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0927?


Explain the CVE ID: What does the identifier CVE-2003-0928 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0928.

Clearswift MAILsweeper before 4.3.15 does not properly detect and filter RAR 3.20 encoded files, which allows remote attackers to bypass intended policy.


Provide references for further information: Can you share references or external links related to CVE-2003-0928?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.corsaire.com/advisories/c030807-001.txt'}, {'name': '20040813 Corsaire Security Advisory - Clearswift MAILsweeper multiple encoding/compression issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109241692108678&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0928?


Explain the CVE ID: What does the identifier CVE-2003-0929 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0929.

Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy.


Provide references for further information: Can you share references or external links related to CVE-2003-0929?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0929?


Explain the CVE ID: What does the identifier CVE-2003-0930 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0930.

Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded files, which allows remote attackers to bypass intended policy.


Provide references for further information: Can you share references or external links related to CVE-2003-0930?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0930?


Explain the CVE ID: What does the identifier CVE-2003-0931 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0931.

Sygate Enforcer 4.0 earlier allows remote attackers to cause a denial of service (service hang) by replaying a malformed discovery packet to UDP port 39999.


Provide references for further information: Can you share references or external links related to CVE-2003-0931?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.corsaire.com/advisories/c031120-001.txt'}, {'name': '20040810 Corsaire Security Advisory - Sygate Enforcer discovery packet DoS issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109215951022437&w=2'}, {'name': 'sygate-enforcer-payload-dos(16949)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16949'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0931?


Explain the CVE ID: What does the identifier CVE-2003-0932 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0932.

Buffer overflow in omega-rpg 0.90 allows local users to execute arbitrary code via a long (1) command line or (2) environment variable.


Provide references for further information: Can you share references or external links related to CVE-2003-0932?

{'name': 'DSA-400', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-400'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0932?


Explain the CVE ID: What does the identifier CVE-2003-0933 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0933.

Buffer overflow in conquest 7.2 and earlier may allow a local user to execute arbitrary code via a long environment variable.


Provide references for further information: Can you share references or external links related to CVE-2003-0933?

{'name': 'DSA-398', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-398'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0933?


Explain the CVE ID: What does the identifier CVE-2003-0934 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0934.

Symbol Access Portable Data Terminal (PDT) 8100 does not hide the default WEP keys if they are not changed, which could allow attackers to retrieve the keys and gain access to the wireless network.


Provide references for further information: Can you share references or external links related to CVE-2003-0934?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.secnap.net/security/031106.html'}, {'name': '20031110 Symbol Technologies Default WEP KEYS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106850011513880&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0934?


Explain the CVE ID: What does the identifier CVE-2003-0935 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0935.

Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed.


Provide references for further information: Can you share references or external links related to CVE-2003-0935?

{'name': 'RHSA-2004:023', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-023.html'}, {'name': 'RHSA-2003:335', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-335.html'}, {'name': 'oval:org.mitre.oval:def:9802', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9802'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/forum/forum.php?forum_id=308015'}, {'name': 'oval:org.mitre.oval:def:869', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A869'}, {'name': 'CLA-2003:778', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000778'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0935?


Explain the CVE ID: What does the identifier CVE-2003-0936 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0936.

Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe.


Provide references for further information: Can you share references or external links related to CVE-2003-0936?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2003.11.13.html'}, {'name': '20031113 RE: Secure Network Operations SRT2003-11-13-0218, PCAnywhere allows local users to become SYSTEM', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106876107330752&w=2'}, {'name': '20031113 SRT2003-11-13-0218 - PCAnywhere local SYSTEM exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106875764826251&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0936?


Explain the CVE ID: What does the identifier CVE-2003-0937 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0937.

SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PID) by obtaining a procfs file descriptor for the file and calling execve() on a setuid or setgid program, which leaves the descriptor open to the user.


Provide references for further information: Can you share references or external links related to CVE-2003-0937?

{'name': 'CSSA-2003-SCO.32', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.32/CSSA-2003-SCO.32.txt'}, {'name': '20031112 Insecure handling of procfs descriptors in UnixWare can lead to local privilege escalation.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106865297403687&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.texonet.com/advisories/TEXONET-20031024.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0937?


Explain the CVE ID: What does the identifier CVE-2003-0938 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0938.

vos24u.c in SAP database server (SAP DB) 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLAT stored procedure.


Provide references for further information: Can you share references or external links related to CVE-2003-0938?

{'name': 'A111703-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a111703-1.txt'}, {'name': 'sapdb-NETAPI32-gain-privileges(13765)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13765'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0938?


Explain the CVE ID: What does the identifier CVE-2003-0939 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0939.

eo420_GetStringFromVarPart in veo420.c for SAP database server (SAP DB) 7.4.03.27 and earlier may allow remote attackers to execute arbitrary code via a connect packet with a 256 byte segment to the niserver (aka serv.exe) process on TCP port 7269, which prevents the server from NULL terminating the string and leads to a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2003-0939?

{'name': 'A111703-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a111703-1.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sapdb.org/7.4/new_relinfo.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0939?


Explain the CVE ID: What does the identifier CVE-2003-0940 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0940.

Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.


Provide references for further information: Can you share references or external links related to CVE-2003-0940?

{'name': 'A111703-2', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a111703-2.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0940?


Explain the CVE ID: What does the identifier CVE-2003-0941 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0941.

web-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent Administration pages and modify configuration via a direct request to waadmin.wa.


Provide references for further information: Can you share references or external links related to CVE-2003-0941?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0941?


Explain the CVE ID: What does the identifier CVE-2003-0942 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0942.

Buffer overflow in Web Agent Administration service in web-tools for SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a long Name parameter to waadmin.wa.


Provide references for further information: Can you share references or external links related to CVE-2003-0942?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0942?


Explain the CVE ID: What does the identifier CVE-2003-0943 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0943.

web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive information or redirect attacks against internal databases via (1) waecho, (2) Web SQL Interface (websql), or (3) Web Database Manager (webdbm).


Provide references for further information: Can you share references or external links related to CVE-2003-0943?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0943?


Explain the CVE ID: What does the identifier CVE-2003-0944 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0944.

Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a URL with a long requestURI.


Provide references for further information: Can you share references or external links related to CVE-2003-0944?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0944?


Explain the CVE ID: What does the identifier CVE-2003-0945 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0945.

The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities.


Provide references for further information: Can you share references or external links related to CVE-2003-0945?

{'name': 'A111703-2', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a111703-2.txt'}, {'name': 'sapdb-manager-sessionid-predictable(13774)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13774'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0945?


Explain the CVE ID: What does the identifier CVE-2003-0946 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0946.

Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the email address argument of a "MAIL FROM" command.


Provide references for further information: Can you share references or external links related to CVE-2003-0946?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=197038'}, {'name': '20031112 SRT2003-11-11-1151 - clamav-milter remote exploit / DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106867135830683&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0946?


Explain the CVE ID: What does the identifier CVE-2003-0947 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0947.

Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable.


Provide references for further information: Can you share references or external links related to CVE-2003-0947?

{'name': '20031112 iwconfig vulnerability - the last code was demaged sending by email', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106867458902521&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0947?


Explain the CVE ID: What does the identifier CVE-2003-0948 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0948.

Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable.


Provide references for further information: Can you share references or external links related to CVE-2003-0948?

{'name': '8901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8901'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/exploits/6Y00R1P8KY.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0948?


Explain the CVE ID: What does the identifier CVE-2003-0949 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0949.

xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.


Provide references for further information: Can you share references or external links related to CVE-2003-0949?

{'name': 'xsok-command-execution(14098)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14098'}, {'name': 'DSA-405', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-405'}, {'name': '9321', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9321'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0949?


Explain the CVE ID: What does the identifier CVE-2003-0950 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0950.

PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (system time) name of the directory used to store the file, and directly requesting that file.


Provide references for further information: Can you share references or external links related to CVE-2003-0950?

{'name': '20031112 IClient Servlet Remote Command Execution Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/xforce/alerts/id/157'}, {'name': 'peoplesoft-iclientservlet-file-upload(12805)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12805'}, {'name': '9041', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9041'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0950?


Explain the CVE ID: What does the identifier CVE-2003-0951 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0951.

Partition Manager (parmgr) in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attackers to obtain sensitive data or gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2003-0951?

{'name': 'oval:org.mitre.oval:def:5146', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5146'}, {'name': 'HPSBUX0311-296', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2003-q4/0041.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0951?


Explain the CVE ID: What does the identifier CVE-2003-0952 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0952.


Provide references for further information: Can you share references or external links related to CVE-2003-0952?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0952?


Explain the CVE ID: What does the identifier CVE-2003-0953 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0953.


Provide references for further information: Can you share references or external links related to CVE-2003-0953?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0953?


Explain the CVE ID: What does the identifier CVE-2003-0954 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-0954.

Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2003-0954?

{'name': '1008258', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008258'}, {'name': '9078', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9078'}, {'name': 'IY49238', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY49238&apar=only'}, {'name': '10276', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10276/'}, {'name': 'IY48747', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY48747&apar=only'}, {'name': 'IY48272', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY48272&apar=only'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-0954?


Explain the CVE ID: What does the identifier CVE-2003-0955 mean in the context of cybersecurity?