Explain the CVE ID: What does the identifier CVE-2003-1013 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1013.

The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q.931, which triggers a null dereference.


Provide references for further information: Can you share references or external links related to CVE-2003-1013?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00012.html'}, {'name': 'oval:org.mitre.oval:def:857', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A857'}, {'name': '20040202-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc'}, {'name': 'MDKSA-2004:002', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:002'}, {'name': 'RHSA-2004:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-001.html'}, {'name': '10568', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10568'}, {'name': 'RHSA-2004:002', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-002.html'}, {'name': '10531', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10531'}, {'name': 'DSA-407', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-407'}, {'name': 'oval:org.mitre.oval:def:10097', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10097'}, {'name': '10570', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10570'}, {'name': '20040103-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc'}, {'name': 'CLA-2004:801', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000801'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1013?


Explain the CVE ID: What does the identifier CVE-2003-1014 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1014.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use multiple MIME fields with the same name, which may be interpreted differently by mail clients.


Provide references for further information: Can you share references or external links related to CVE-2003-1014?

{'name': '20040914 Corsaire Security Advisory - Multiple vendor MIME field multiple occurrence issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109517732328759&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.uniras.gov.uk/vuls/2004/380375/mime.htm'}, {'name': 'mime-field-filtering-bypass(17333)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17333'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1014?


Explain the CVE ID: What does the identifier CVE-2003-1015 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1015.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which may be interpreted differently by mail clients.


Provide references for further information: Can you share references or external links related to CVE-2003-1015?

{'name': '20040914 Corsaire Security Advisory - Multiple vendor MIME field whitespace issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109525252118936&w=2'}, {'name': 'mime-tools-incorrect-concatenation(9273)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9273'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.uniras.gov.uk/vuls/2004/380375/mime.htm'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1015?


Explain the CVE ID: What does the identifier CVE-2003-1016 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1016.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers, parameters, and values, including (1) fields that should not be quoted, (2) duplicate quotes, or (3) missing leading or trailing quote characters, which may be interpreted differently by mail clients.


Provide references for further information: Can you share references or external links related to CVE-2003-1016?

{'name': 'mime-quote-filtering-bypass(17336)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/17336'}, {'name': '20040914 Corsaire Security Advisory - Multiple vendor MIME field quoting issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=109521027007616&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.uniras.gov.uk/vuls/2004/380375/mime.htm'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1016?


Explain the CVE ID: What does the identifier CVE-2003-1017 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1017.

Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names.


Provide references for further information: Can you share references or external links related to CVE-2003-1017?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/devnet/security/security_zone/mpsb03-08.html'}, {'name': 'flash-file-predictable-location(14013)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14013'}, {'name': '8900', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8900'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1017?


Explain the CVE ID: What does the identifier CVE-2003-1018 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1018.

Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2003-1018?

{'name': '9254', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9254'}, {'name': 'MSS-OAR-E01-20', 'tags': ['vendor-advisory', 'x_refsource_IBM'], 'url': 'http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-20'}, {'name': 'aix-enq-format-string(14037)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14037'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1018?


Explain the CVE ID: What does the identifier CVE-2003-1020 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1020.

The format_send_to_gui function in formats.c for irssi before 0.8.9 allows remote IRC users to cause a denial of service (crash).


Provide references for further information: Can you share references or external links related to CVE-2003-1020?

{'name': '20031211 irssi - potential remote crash', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/347218'}, {'name': 'MDKSA-2003:117', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:117'}, {'name': 'irssi-dos(13973)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13973'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1020?


Explain the CVE ID: What does the identifier CVE-2003-1021 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1021.

The scosession program in OpenServer 5.0.6 and 5.0.7 allows local users to gain privileges via crafted strings on the commandline.


Provide references for further information: Can you share references or external links related to CVE-2003-1021?

{'name': '12372', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12372'}, {'name': 'SCOSA-2005.5', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.5/SCOSA-2005.5.txt'}, {'name': 'VU#972598', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/972598'}, {'name': '14012', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14012/'}, {'name': 'openserver-scosession-gain-privilege(19479)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19479'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1021?


Explain the CVE ID: What does the identifier CVE-2003-1022 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1022.

Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory.


Provide references for further information: Can you share references or external links related to CVE-2003-1022?

{'name': '9377', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9377'}, {'name': 'fspsuite-dot-directory-traversal(14154)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14154'}, {'name': 'O-048', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-048.shtml'}, {'name': '3346', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3346'}, {'name': 'DSA-416', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-416'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1022?


Explain the CVE ID: What does the identifier CVE-2003-1023 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1023.

Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion.


Provide references for further information: Can you share references or external links related to CVE-2003-1023?

{'name': 'RHSA-2004:034', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2004-034.html'}, {'name': '10772', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10772'}, {'name': '20040202-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc'}, {'name': 'FLSA:1224', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2004-May/msg00002.html'}, {'name': 'midnight-commander-vfssresolvesymlink-bo(13247)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13247'}, {'name': '20040201-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc'}, {'name': '10716', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10716'}, {'name': '20040405 [OpenPKG-SA-2004.009] OpenPKG Security Advisory (mc)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=108118433222764&w=2'}, {'name': 'CSSA-2004-014.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-014.0.txt'}, {'name': 'FEDORA-2004-058', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/updates/FEDORA-2004-058.shtml'}, {'name': '10645', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10645'}, {'name': 'MDKSA-2004:007', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:007'}, {'name': '10823', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10823'}, {'name': '20030919 uninitialized buffer in midnight commander', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archive.cert.uni-stuttgart.de/bugtraq/2003/09/msg00309.html'}, {'name': 'CLA-2004:833', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000833'}, {'name': '8658', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8658'}, {'name': 'DSA-424', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-424'}, {'name': 'RHSA-2004:035', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2004-035.html'}, {'name': '10685', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10685'}, {'name': '11219', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11219'}, {'name': 'oval:org.mitre.oval:def:822', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A822'}, {'name': '9833', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/9833'}, {'name': '11296', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11296'}, {'name': '11268', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11268'}, {'name': '11262', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11262'}, {'name': 'GLSA-200403-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200403-09.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1023?


Explain the CVE ID: What does the identifier CVE-2003-1024 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1024.

Unknown vulnerability in the ls-F builtin function in tcsh on Solaris 8 allows local users to create or delete files as other users, and gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2003-1024?

{'name': '9280', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9280'}, {'name': 'oval:org.mitre.oval:def:1528', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1528'}, {'name': 'VU#281356', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/281356'}, {'name': 'solaris-lsf-gain-privileges(14065)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14065'}, {'name': '57455', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57455'}, {'name': '10486', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10486'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1024?


Explain the CVE ID: What does the identifier CVE-2003-1025 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1025.

Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2003-1025?

{'name': 'oval:org.mitre.oval:def:510', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A510'}, {'name': 'oval:org.mitre.oval:def:526', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A526'}, {'name': 'VU#652278', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/652278'}, {'name': '20031209 Internet Explorer URL parsing vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/346948'}, {'name': 'oval:org.mitre.oval:def:513', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A513'}, {'name': 'ie-domain-url-spoofing(13935)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13935'}, {'name': 'oval:org.mitre.oval:def:491', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A491'}, {'name': 'TA04-033A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-033A.html'}, {'name': 'oval:org.mitre.oval:def:512', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A512'}, {'name': 'oval:org.mitre.oval:def:490', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A490'}, {'name': 'MS04-004', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zapthedingbat.com/security/ex01/vun1.htm'}, {'name': 'oval:org.mitre.oval:def:511', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A511'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1025?


Explain the CVE ID: What does the identifier CVE-2003-1026 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1026.

Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the "Travel Log Cross Domain Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2003-1026?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.safecenter.net/UMBRELLAWEBV4/BackToFramedJpu'}, {'name': 'oval:org.mitre.oval:def:630', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A630'}, {'name': 'VU#784102', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/784102'}, {'name': 'oval:org.mitre.oval:def:689', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A689'}, {'name': 'oval:org.mitre.oval:def:774', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A774'}, {'name': '20031201 Comments on 5 IE vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107038202225587&w=2'}, {'name': 'oval:org.mitre.oval:def:687', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A687'}, {'name': 'TA04-033A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-033A.html'}, {'name': 'oval:org.mitre.oval:def:805', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A805'}, {'name': 'MS04-004', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004'}, {'name': 'oval:org.mitre.oval:def:643', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A643'}, {'name': '20031125 BackToFramedJpu - a successor of BackToJpu attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106979349517578&w=2'}, {'name': 'ie-subframe-xss(13846)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13846'}, {'name': 'oval:org.mitre.oval:def:745', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A745'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1026?


Explain the CVE ID: What does the identifier CVE-2003-1027 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1027.

Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2003-1027?

{'name': 'oval:org.mitre.oval:def:527', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A527'}, {'name': 'VU#413886', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/413886'}, {'name': 'oval:org.mitre.oval:def:629', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A629'}, {'name': 'oval:org.mitre.oval:def:531', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A531'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.safecenter.net/UMBRELLAWEBV4/HijackClickV2'}, {'name': 'oval:org.mitre.oval:def:530', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A530'}, {'name': '20031201 Comments on 5 IE vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107038202225587&w=2'}, {'name': 'TA04-033A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-033A.html'}, {'name': 'MS04-004', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004'}, {'name': 'oval:org.mitre.oval:def:532', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A532'}, {'name': 'oval:org.mitre.oval:def:534', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A534'}, {'name': '20031125 HijackClickV2 - a successor of HijackClick attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106979479719446&w=2'}, {'name': 'ie-method-perform-actions(13844)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13844'}, {'name': 'oval:org.mitre.oval:def:529', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A529'}, {'name': '1006036', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006036'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1027?


Explain the CVE ID: What does the identifier CVE-2003-1028 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1028.

The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an invalid ContentType and a .htm file, which could allow remote attackers to bypass security mechanisms that rely on random names, as demonstrated by threadid10008.


Provide references for further information: Can you share references or external links related to CVE-2003-1028?

{'name': '7890', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7890'}, {'name': '20031201 Comments on 5 IE vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107038202225587&w=2'}, {'name': 'ie-download-directory-disclosure(13847)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13847'}, {'name': '20031125 Note for "Invalid ContentType may disclose cache directory"', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106979428718705&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.safecenter.net/UMBRELLAWEBV4/threadid10008'}, {'name': '20031125 Invalid ContentType may disclose cache directory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=106979624321665&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1028?


Explain the CVE ID: What does the identifier CVE-2003-1029 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1029.

The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_print to use a bad length value when calling print_octets.


Provide references for further information: Can you share references or external links related to CVE-2003-1029?

{'name': '10718', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10718'}, {'name': '10668', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10668'}, {'name': '[tcpdump-workers] 20031224 Seg fault of tcpdump (v 3.8.1 and below) with malformed l2tp packets', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=tcpdump-workers&m=107228187124962&w=2'}, {'name': '10636', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10636'}, {'name': '1008748', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1008748'}, {'name': 'ESA-20040119-002', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://lwn.net/Alerts/66805/'}, {'name': 'MDKSA-2004:008', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2004:008'}, {'name': "20040119 [ESA-20040119-002] 'tcpdump' multiple vulnerabilities.", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/350238/30/21640/threaded'}, {'name': 'DSA-425', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-425'}, {'name': '10652', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10652'}, {'name': '20031221 Re: Remote crash in tcpdump from OpenBSD', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107213553214985&w=2'}, {'name': '20031220 Remote crash in tcpdump from OpenBSD', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107193841728533&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1029?


Explain the CVE ID: What does the identifier CVE-2003-1030 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1030.

Buffer overflow in DameWare Mini Remote Control before 3.73 allows remote attackers to execute arbitrary code via a long pre-authentication request to TCP port 6129.


Provide references for further information: Can you share references or external links related to CVE-2003-1030?

{'name': '9213', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9213'}, {'name': 'dameware-spoof-packet-bo(14001)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14001'}, {'name': 'VU#909678', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/909678'}, {'name': '20031219 [Exploit]: DameWare Mini Remote Control Server Overflow Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107187110617266&w=2'}, {'name': '20031214 DameWare Mini Remote Control Server <= 3.72 Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107152094119279&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sh0dan.org/files/dwmrcs372.txt'}, {'name': '20040110 DameWare Mini Remote Control < v3.73 remote exploit by kralor]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107392603615840&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1030?


Explain the CVE ID: What does the identifier CVE-2003-1031 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1031.

Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as (1) "Interests-Hobbies", (2) "Biography", or (3) "Occupation."


Provide references for further information: Can you share references or external links related to CVE-2003-1031?

{'name': '20030808 VBulletin New Member XSS Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0078.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1031?


Explain the CVE ID: What does the identifier CVE-2003-1032 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1032.

Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink, allows remote attackers to cause a denial of service (crash) via a malformed URL to the web server, possibly involving a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2003-1032?

{'name': '20030602 Tripbit Advisory TA-2003-05 Buffer Overflow Vulnerability in Pi3 Web', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105465813729100&w=2'}, {'name': '1006913', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1006913'}, {'name': '7787', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7787'}, {'name': '20030605 Re: Tripbit Advisory TA-2003-05 Buffer Overflow Vulnerability in Pi3 Web', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105484265218325&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1032?


Explain the CVE ID: What does the identifier CVE-2003-1033 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1033.

The (1) instdbmsrv and (2) instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT environment variable as a path when assigning setuid permissions to the lserver program, which allows local users to gain root privileges via a modified INSTROOT that points to a malicious dbmsrv or lserver program.


Provide references for further information: Can you share references or external links related to CVE-2003-1033?

{'name': 'sap-db-gain-privileges(11842)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11842'}, {'name': '7407', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7407'}, {'name': '[SAP DB Dev] 20030422 Security Alert: Development Tools', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://listserv.sap.com/pipermail/sapdb.sources/2003-April/000143.html'}, {'name': '7408', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7408'}, {'name': '20030422 SRT2003-04-22-1336 - SAP DB Development Tools install flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105103613727471&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1033?


Explain the CVE ID: What does the identifier CVE-2003-1034 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1034.

The RPM installation of SAP DB 7.x creates the (1) dbmsrv or (2) lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs.


Provide references for further information: Can you share references or external links related to CVE-2003-1034?

{'name': 'sap-db-world-writable(11669)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11669'}, {'name': '7242', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7242'}, {'name': '20030331 SRT2003-03-31-1219 - SAP world writable server binaries', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104914778303805&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1034?


Explain the CVE ID: What does the identifier CVE-2003-1035 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1035.

The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does.


Provide references for further information: Can you share references or external links related to CVE-2003-1035?

{'name': '7007', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7007'}, {'name': '20030304 SAP R/3, account locking and RFC SDK', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004039.html'}, {'name': '20061112 Old SAP exploits', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/451378/100/0/threaded'}, {'name': 'sap-sapinfo-lockout-bypass(11487)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11487'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1035?


Explain the CVE ID: What does the identifier CVE-2003-1036 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1036.

Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code via long (1) ~command, (2) ~runtimemode, or (3) ~session parameters, or (4) a long HTTP Content-Type header.


Provide references for further information: Can you share references or external links related to CVE-2003-1036?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.phenoelit.de/stuff/Phenoelit20c3.pd'}, {'name': 'sap-multiple-bo(14186)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14186'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1036?


Explain the CVE ID: What does the identifier CVE-2003-1037 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1037.

Format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS) allows remote attackers to execute arbitrary code via a high "trace level."


Provide references for further information: Can you share references or external links related to CVE-2003-1037?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.phenoelit.de/stuff/Phenoelit20c3.pd'}, {'name': '1009453', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009453'}, {'name': 'sap-wgate-format-string(15514)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15514'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1037?


Explain the CVE ID: What does the identifier CVE-2003-1038 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1038.

The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames.


Provide references for further information: Can you share references or external links related to CVE-2003-1038?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.phenoelit.de/stuff/Phenoelit20c3.pd'}, {'name': 'sap-agate-path-disclosure(15516)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15516'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1038?


Explain the CVE ID: What does the identifier CVE-2003-1039 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1039.

Multiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute arbitrary code via a long HTTP Host header to (1) Message Server, (2) Web Dispatcher, or (3) Application Server.


Provide references for further information: Can you share references or external links related to CVE-2003-1039?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.phenoelit.de/stuff/Phenoelit20c3.pd'}, {'name': 'mysap-host-header-bo(15513)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15513'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1039?


Explain the CVE ID: What does the identifier CVE-2003-1040 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1040.

kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service (crash) by sending certain signals to kmod.


Provide references for further information: Can you share references or external links related to CVE-2003-1040?

{'name': 'SuSE-SA:2003:049', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_049_kernel.html'}, {'name': '20040204-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040204-01-U.asc'}, {'name': 'linux-kmod-signals-dos(15577)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15577'}, {'name': 'CLSA-2004:820', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820'}, {'name': 'RHSA-2004:069', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-069.html'}, {'name': 'RHSA-2004:188', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-188.html'}, {'name': 'RHSA-2004:106', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-106.html'}, {'name': 'oval:org.mitre.oval:def:9423', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9423'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://linux.bkbits.net:8080/linux-2.4/diffs/kernel/kmod.c%401.6?nav=index.html%7Csrc/%7Csrc/kernel%7Chist/kernel/kmod.c'}, {'name': 'RHSA-2004:065', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-065.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1040?


Explain the CVE ID: What does the identifier CVE-2003-1041 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1041.

Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm extension.  NOTE: this bug may overlap CVE-2004-0475.


Provide references for further information: Can you share references or external links related to CVE-2003-1041?

{'name': 'TA04-196A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-196A.html'}, {'name': 'oval:org.mitre.oval:def:1186', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1186'}, {'name': '9320', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9320'}, {'name': 'MS04-023', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-023'}, {'name': 'oval:org.mitre.oval:def:1943', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1943'}, {'name': 'VU#187196', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/187196'}, {'name': 'oval:org.mitre.oval:def:956', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A956'}, {'name': 'oval:org.mitre.oval:def:3514', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3514'}, {'name': 'ie-showhelp-directory-traversal(14105)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14105'}, {'name': '20031230 IE 5.x-6.0 allows executing arbitrary programs using showHelp()', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/348521'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1041?


Explain the CVE ID: What does the identifier CVE-2003-1042 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1042.

SQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and earlier allows remote authenticated users with editproducts privileges to execute arbitrary SQL via the product name.


Provide references for further information: Can you share references or external links related to CVE-2003-1042?

{'name': '20031103 [BUGZILLA] Security Advisory - SQL injection, information leak', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/343185'}, {'name': 'CLA-2003:774', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=214290'}, {'name': 'bugzilla-productname-sql-injection(13594)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13594'}, {'name': '8953', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8953'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1042?


Explain the CVE ID: What does the identifier CVE-2003-1043 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1043.

SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi.


Provide references for further information: Can you share references or external links related to CVE-2003-1043?

{'name': '20031103 [BUGZILLA] Security Advisory - SQL injection, information leak', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/343185'}, {'name': 'CLA-2003:774', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=219044'}, {'name': 'bugzilla-url-sql-injection(13596)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13596'}, {'name': '8953', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8953'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1043?


Explain the CVE ID: What does the identifier CVE-2003-1044 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1044.

editproducts.cgi in Bugzilla 2.16.3 and earlier, when usebuggroups is enabled, does not properly remove group add privileges from a group that is being deleted, which allows users with those privileges to perform unauthorized additions to the next group that is assigned with the original group ID.


Provide references for further information: Can you share references or external links related to CVE-2003-1044?

{'name': '20031103 [BUGZILLA] Security Advisory - SQL injection, information leak', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/343185'}, {'name': 'bugzilla-groupid-gain-privileges(13597)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13597'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=219690'}, {'name': 'CLA-2003:774', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774'}, {'name': '8953', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8953'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1044?


Explain the CVE ID: What does the identifier CVE-2003-1045 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1045.

votes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote attackers to read a user's voting page when that user has voted on a restricted bug, which allows remote attackers to read potentially sensitive voting information by modifying the who parameter.


Provide references for further information: Can you share references or external links related to CVE-2003-1045?

{'name': '20031103 [BUGZILLA] Security Advisory - SQL injection, information leak', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/343185'}, {'name': 'CLA-2003:774', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774'}, {'name': 'bugzilla-obtain-information(13600)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13600'}, {'name': '8953', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8953'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=209376'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1045?


Explain the CVE ID: What does the identifier CVE-2003-1046 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1046.

describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows remote attackers to list component descriptions for otherwise restricted products.


Provide references for further information: Can you share references or external links related to CVE-2003-1046?

{'name': '20031103 [BUGZILLA] Security Advisory - SQL injection, information leak', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/343185'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=209742'}, {'name': '8953', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8953'}, {'name': 'bugzilla-describecomponents-obtain-info(13602)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13602'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1046?


Explain the CVE ID: What does the identifier CVE-2003-1047 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1047.


Provide references for further information: Can you share references or external links related to CVE-2003-1047?


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1047?


Explain the CVE ID: What does the identifier CVE-2003-1048 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1048.

Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.


Provide references for further information: Can you share references or external links related to CVE-2003-1048?

{'name': 'VU#685364', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/685364'}, {'name': 'ie-mshtml-gif-bo(16804)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16804'}, {'name': '20040903 Re: [Full-Disclosure] New Microsoft Internet Explorer mshtml.dll Denial of Service?', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009506.html'}, {'name': 'oval:org.mitre.oval:def:509', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A509'}, {'name': 'oval:org.mitre.oval:def:236', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A236'}, {'name': '8530', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8530'}, {'name': '20030902 New Microsoft Internet Explorer mshtml.dll Denial of Service?', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009445.html'}, {'name': 'oval:org.mitre.oval:def:1793', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1793'}, {'name': 'oval:org.mitre.oval:def:206', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A206'}, {'name': 'MS04-025', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025'}, {'name': '20040902 AW: [Full-Disclosure] New Microsoft Internet Explorer mshtml.dll', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009473.html'}, {'name': 'TA04-212A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA04-212A.html'}, {'name': 'oval:org.mitre.oval:def:517', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A517'}, {'name': 'oval:org.mitre.oval:def:2100', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2100'}, {'name': 'oval:org.mitre.oval:def:212', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A212'}, {'name': 'O-191', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-191.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1048?


Explain the CVE ID: What does the identifier CVE-2003-1049 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1049.

IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to modify or delete certain DB2 files.


Provide references for further information: Can you share references or external links related to CVE-2003-1049?

{'name': 'db2-dms-insecure-permissions(14030)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14030'}, {'name': '9243', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9243'}, {'name': 'IY44841', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY44841&apar=only'}, {'name': 'IY44842', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY44842&apar=only'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1049?


Explain the CVE ID: What does the identifier CVE-2003-1050 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1050.

Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.


Provide references for further information: Can you share references or external links related to CVE-2003-1050?

{'name': 'db2-multiple-binaries-bo(13633)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13633'}, {'name': '8990', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8990'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt'}, {'name': '20031108 SRT2003-11-06-0710 - IBM DB2 Multiple local security issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/343804'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1050?


Explain the CVE ID: What does the identifier CVE-2003-1051 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1051.

Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.


Provide references for further information: Can you share references or external links related to CVE-2003-1051?

{'name': '8989', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8989'}, {'name': 'db2-multiple-binaries-bo(13633)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13633'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt'}, {'name': '20031108 SRT2003-11-06-0710 - IBM DB2 Multiple local security issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/343804'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1051?


Explain the CVE ID: What does the identifier CVE-2003-1052 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1052.

IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs.


Provide references for further information: Can you share references or external links related to CVE-2003-1052?

{'name': 'ibm-db2-gain-privileges(12826)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12826'}, {'name': '20030805 Slight privilege elevation from bin to root in IBM DB2 7.1 - 8.1 all binaries', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/331904'}, {'name': '8346', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8346'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1052?


Explain the CVE ID: What does the identifier CVE-2003-1053 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1053.

Multiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long (1) -KCONV command line option or (2) XSHISENLIB environment variable.


Provide references for further information: Can you share references or external links related to CVE-2003-1053?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vuxml.org/freebsd/56971fa6-641c-11d9-a097-000854d03344.html'}, {'name': 'xshisen-xshisenlib-bo(13359)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13359'}, {'name': '9950', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/9950'}, {'name': 'xshisen-kconv-bo(13358)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13358'}, {'name': '8770', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8770'}, {'name': '8776', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8776'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=213957'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1053?


Explain the CVE ID: What does the identifier CVE-2003-1054 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1054.

mod_access_referer 1.0.2 allows remote attackers to cause a denial of service (crash) via a malformed Referer header that is missing a hostname, as parsed by the ap_parse_uri_components function in Apache, which triggers a null dereference.


Provide references for further information: Can you share references or external links related to CVE-2003-1054?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vuxml.org/freebsd/af747389-42ba-11d9-bd37-00065be4b5b6.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=151905'}, {'name': '8612', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8612'}, {'name': '20030416 [VulnWatch] Apache mod_access_referer denial of service issue', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-April/004555.html'}, {'name': '7375', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7375'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1054?


Explain the CVE ID: What does the identifier CVE-2003-1055 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1055.

Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDAP lookup.


Provide references for further information: Can you share references or external links related to CVE-2003-1055?

{'name': 'N-113', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-113.shtml'}, {'name': '7064', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7064'}, {'name': '52222', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-52222-1'}, {'name': '1006401', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006401'}, {'name': 'solaris-nssldapso1-bo(11641)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11641'}, {'name': 'ESB-2003.0461', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=3224'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1055?


Explain the CVE ID: What does the identifier CVE-2003-1056 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1056.

The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2003-1056?

{'name': 'ESB-2003.0851', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=3688'}, {'name': '2955', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2955'}, {'name': '57443', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57443-1'}, {'name': '9199', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9199'}, {'name': 'solaris-ed1-tmpfile-insecure(13952)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13952'}, {'name': '10411', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10411'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1056?


Explain the CVE ID: What does the identifier CVE-2003-1057 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1057.

Unknown vulnerability in CDE Print Viewer (dtprintinfo) for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2003-1057?

{'name': 'ESB-2003.0844', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=3675'}, {'name': '10384', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10384'}, {'name': '9170', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9170'}, {'name': 'O-035', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-035.shtml'}, {'name': 'cde-dtprintinfo-gain-privileges(13914)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13914'}, {'name': '2924', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2924'}, {'name': '57441', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57441-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1057?


Explain the CVE ID: What does the identifier CVE-2003-1058 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1058.

The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of service (Xsun crash) or to create or overwrite arbitrary files on the system, probably via a symlink attack on temporary server files.


Provide references for further information: Can you share references or external links related to CVE-2003-1058?

{'name': '9147', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9147'}, {'name': '10346', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10346'}, {'name': '57419', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57419-1'}, {'name': 'solaris-xsun-gain-privileges(13890)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13890'}, {'name': 'O-033', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-033.shtml'}, {'name': '2892', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2892'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1058?


Explain the CVE ID: What does the identifier CVE-2003-1059 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1059.

Unknown vulnerability in the libraries for the PGX32 frame buffer in Solaris 2.5.1 and 2.6 through 9 allows local users to gain root access.


Provide references for further information: Can you share references or external links related to CVE-2003-1059?

{'name': 'solaris-pgx32-gain-privileges(13792)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13792'}, {'name': 'O-029', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-029.shtml'}, {'name': '10267', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10267'}, {'name': '9076', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9076'}, {'name': '2839', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2839'}, {'name': '57360', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57360-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1059?


Explain the CVE ID: What does the identifier CVE-2003-1060 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1060.

The NFS Server for Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (UFS panic) via certain invalid UFS requests, which triggers a null dereference.


Provide references for further information: Can you share references or external links related to CVE-2003-1060?

{'name': 'solaris-nfs-ufs-dos(13547)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13547'}, {'name': '8929', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8929'}, {'name': '57406', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57406-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1060?


Explain the CVE ID: What does the identifier CVE-2003-1061 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1061.

Race condition in Solaris 2.6 through 9 allows local users to cause a denial of service (kernel panic), as demonstrated via the namefs function, pipe, and certain STREAMS routines.


Provide references for further information: Can you share references or external links related to CVE-2003-1061?

{'name': '57080', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57080-1'}, {'name': '8836', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8836'}, {'name': 'solaris-race-dos(13434)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13434'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1061?


Explain the CVE ID: What does the identifier CVE-2003-1062 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1062.

Unknown vulnerability in the sysinfo system call for Solaris for SPARC 2.6 through 9, and Solaris for x86 2.6, 7, and 8, allows local users to read kernel memory.


Provide references for further information: Can you share references or external links related to CVE-2003-1062?

{'name': 'solaris-sysinfo-read-memory(13435)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/13435'}, {'name': '10006', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10006/'}, {'name': '57340', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57340-1'}, {'name': '8831', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8831'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1062?


Explain the CVE ID: What does the identifier CVE-2003-1063 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1063.

The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy.


Provide references for further information: Can you share references or external links related to CVE-2003-1063?

{'name': '56300', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-56300-1'}, {'name': 'N-134', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-134.shtml'}, {'name': '8461', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8461'}, {'name': 'solaris-cachefs-inetdconf-overwrite(12942)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12942'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1063?


Explain the CVE ID: What does the identifier CVE-2003-1064 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1064.

Solaris 8 with IPv6 enabled allows remote attackers to cause a denial of service (kernel panic) via a crafted IPv6 packet.


Provide references for further information: Can you share references or external links related to CVE-2003-1064?

{'name': '8250', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8250'}, {'name': 'solaris-ipv6-packet-dos(12680)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12680'}, {'name': '55301', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-55301-1'}, {'name': 'VU#370060', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/370060'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1064?


Explain the CVE ID: What does the identifier CVE-2003-1065 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1065.

Unknown vulnerability in patches 108993-14 through 108993-19 and 108994-14 through 108994-19 for Solaris 8 may allow local users to cause a denial of service (automountd crash).


Provide references for further information: Can you share references or external links related to CVE-2003-1065?

{'name': 'automountd-dos(19437)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19437'}, {'name': '55340', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-55340-1'}, {'name': 'openssh-ldap-dos(19441)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19441'}, {'name': '8253', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/8253'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1065?


Explain the CVE ID: What does the identifier CVE-2003-1066 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1066.

Buffer overflow in the syslog daemon for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (syslogd crash) and possibly execute arbitrary code via long syslog UDP packets.


Provide references for further information: Can you share references or external links related to CVE-2003-1066?

{'name': '55440', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-55440-1'}, {'name': 'sun-syslogd-bo(12194)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12194'}, {'name': '20030604 Solaris syslogd overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/324015'}, {'name': '8944', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8944/'}, {'name': '7820', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7820'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1066?


Explain the CVE ID: What does the identifier CVE-2003-1067 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1067.

Multiple buffer overflows in the (1) dbm_open function, as used in ndbm and dbm, and the (2) dbminit function in Solaris 2.6 through 9 allow local users to gain root privileges via long arguments to Xsun or other programs that use these functions.


Provide references for further information: Can you share references or external links related to CVE-2003-1067?

{'name': '9088', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/9088/'}, {'name': '55420', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-55420-1'}, {'name': 'sun-database-functions-bo(12379)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12379'}, {'name': 'N-108', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-108.shtml'}, {'name': '7991', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7991'}, {'name': '64758', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/64758'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1067?


Explain the CVE ID: What does the identifier CVE-2003-1068 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1068.

Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4659277, a different vulnerability than CVE-2003-1082.


Provide references for further information: Can you share references or external links related to CVE-2003-1068?

{'name': 'solaris-utmp-update-bo(11083)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11083'}, {'name': '55260', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-55260-1'}, {'name': '7835', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7835'}, {'name': 'N-105', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-105.shtml'}, {'name': '8957', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8957/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1068?


Explain the CVE ID: What does the identifier CVE-2003-1069 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1069.

The Telnet daemon (in.telnetd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (CPU consumption by infinite loop).


Provide references for further information: Can you share references or external links related to CVE-2003-1069?

{'name': '8935', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8935/'}, {'name': '7794', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7794'}, {'name': 'sun-intelnetd-dos(12140)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/12140'}, {'name': '54181', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-54181-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1069?


Explain the CVE ID: What does the identifier CVE-2003-1070 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1070.

Unknown vulnerability in rpcbind for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (rpcbind crash).


Provide references for further information: Can you share references or external links related to CVE-2003-1070?

{'name': '8685', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8685/'}, {'name': '7455', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7455'}, {'name': '50922', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-50922-1'}, {'name': 'sun-rpcbind-dos(11906)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11906'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1070?


Explain the CVE ID: What does the identifier CVE-2003-1071 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1071.

rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing stderr before executing wall, then supplying a spoofed from header.


Provide references for further information: Can you share references or external links related to CVE-2003-1071?

{'name': 'solaris-wall-message-spoofing(11608)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11608'}, {'name': '20030103 Solaris 2.x /usr/sbin/wall Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/305105'}, {'name': '6509', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6509'}, {'name': '1006682', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006682'}, {'name': 'VU#944241', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/944241'}, {'name': '7825', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7825/'}, {'name': '51980', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-51980-1'}, {'name': '1005882', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1005882'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1071?


Explain the CVE ID: What does the identifier CVE-2003-1072 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1072.

Memory leak in lofiadm in Solaris 8 allows local users to cause a denial of service (kernel memory consumption).


Provide references for further information: Can you share references or external links related to CVE-2003-1072?

{'name': 'sun-lofiadm-dos(11895)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11895'}, {'name': '54100', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-54100-1'}, {'name': '8686', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8686/'}, {'name': '7454', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7454'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1072?


Explain the CVE ID: What does the identifier CVE-2003-1073 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1073.

A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.


Provide references for further information: Can you share references or external links related to CVE-2003-1073?

{'name': '1005994', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1005994'}, {'tags': ['x_refsource_MISC'], 'url': 'http://isec.pl/vulnerabilities/isec-0008-sun-at.txt'}, {'name': 'solaris-at-race-condition(11180)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11180'}, {'name': 'solaris-at-directory-traversal(11179)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11179'}, {'name': '20030127 Sun Microsystems Solaris at -r job name handling and race condition vulnerabilities', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0044.html'}, {'name': '20030127 Sun Microsystems Solaris at -r job name handling and race condition vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/308577'}, {'name': '7960', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7960/'}, {'name': '6693', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6693'}, {'name': '6692', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6692'}, {'name': 'N-070', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-070.shtml'}, {'name': '50161', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-50161-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1073?


Explain the CVE ID: What does the identifier CVE-2003-1074 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1074.

Unknown vulnerability in newtask for Solaris 9 allows local users to gain root privileges.


Provide references for further information: Can you share references or external links related to CVE-2003-1074?

{'name': 'N-069', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-069.shtml'}, {'name': '7252', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7252'}, {'name': 'solaris-newtask-root-access(11657)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11657'}, {'name': '8454', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8454/'}, {'name': '52111', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-52111-1'}, {'name': '1006411', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006411'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1074?


Explain the CVE ID: What does the identifier CVE-2003-1075 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1075.

Unknown vulnerability in the FTP server (in.ftpd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (temporary FTP server hang), which affects other active mode FTP clients.


Provide references for further information: Can you share references or external links related to CVE-2003-1075?

{'name': 'solaris-ftpd-dos(11186)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11186'}, {'name': '1005996', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1005996'}, {'name': '6709', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6709'}, {'name': '50240', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-50240-1'}, {'name': '7968', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7968/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1075?


Explain the CVE ID: What does the identifier CVE-2003-1076 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1076.

Unknown vulnerability in sendmail for Solaris 7, 8, and 9 allows local users to cause a denial of service (unknown impact) and possibly gain privileges via certain constructs in a .forward file.


Provide references for further information: Can you share references or external links related to CVE-2003-1076?

{'name': '1006234', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006234'}, {'name': 'N-050', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-050.shtml'}, {'name': 'solaris-sendmail-forward-privileges(11496)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11496'}, {'name': '7033', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7033'}, {'name': '50904', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-50904-1'}, {'name': '8235', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8235/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1076?


Explain the CVE ID: What does the identifier CVE-2003-1077 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1077.

Unknown vulnerability in UFS for Solaris 9 for SPARC, with logging enabled, allows local users to cause a denial of service (UFS file system hang).


Provide references for further information: Can you share references or external links related to CVE-2003-1077?

{'name': '1006233', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006233'}, {'name': '7032', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7032'}, {'name': '51300', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-51300-1'}, {'name': '8234', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8234/'}, {'name': 'solaris-ufs-logging-dos(11481)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11481'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1077?


Explain the CVE ID: What does the identifier CVE-2003-1078 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1078.

The FTP client for Solaris 2.6, 7, and 8 with the debug (-d) flag enabled displays the user password on the screen during login.


Provide references for further information: Can you share references or external links related to CVE-2003-1078?

{'name': '51081', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-51081-1'}, {'name': '1006195', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006195'}, {'name': 'solaris-ftp-plaintext-password(11436)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11436'}, {'name': '8186', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8186/'}, {'name': '6989', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6989'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1078?


Explain the CVE ID: What does the identifier CVE-2003-1079 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1079.

Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service (memory consumption) via certain arguments in RPC calls that cause large amounts of memory to be allocated.


Provide references for further information: Can you share references or external links related to CVE-2003-1079?

{'name': 'solaris-udp-rpc-dos(11368)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11368'}, {'name': '1006131', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006131'}, {'name': '6883', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6883'}, {'name': '8092', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8092/'}, {'name': '50626', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-50626-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1079?


Explain the CVE ID: What does the identifier CVE-2003-1080 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1080.

Unknown vulnerability in mail for Solaris 2.6 through 9 allows local users to read the email of other users.


Provide references for further information: Can you share references or external links related to CVE-2003-1080?

{'name': '1006084', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1006084'}, {'name': 'solaris-mail-unauthorized-access(11303)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11303'}, {'name': '6838', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6838'}, {'name': '8058', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8058/'}, {'name': '50751', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-50751-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1080?


Explain the CVE ID: What does the identifier CVE-2003-1081 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1081.

Aspppls for Solaris 8 allows local users to overwrite arbitrary files via a symlink attack on the .asppp.fifo temporary file.


Provide references for further information: Can you share references or external links related to CVE-2003-1081?

{'name': 'solaris-aspppls-tmpfile-symlink(10105)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10105'}, {'name': '46903', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-46903-1'}, {'name': 'O-001', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-001.shtml'}, {'name': 'ESB-2003.0621', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=3411&cid=1'}, {'name': '5698', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5698'}, {'name': 'VU#464817', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/464817'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2003-1081?


Explain the CVE ID: What does the identifier CVE-2003-1082 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2003-1082.

Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4705891, a different vulnerability than CVE-2003-1068.