Skip to content
OpenAdvisories

Archive

January 2003

Vulnerabilities first published in this month (UTC), newest first.

← December 2002 2003 / January February 2003 →
  1. 1 
  2. 2 
  3. 33
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 89
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 152
  16. 161
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 223
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 294
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Medium —
    CVE-2003-0038 Public exploit

    Mailman Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.

    mailman PyPI
  • Unscored —
    CVE-2003-0037

    Buffer overflows in noffle news server 1.0.1 and earlier allow remote attackers to cause a denial of service (segmentat…

  • Medium —
    CVE-2003-0042 Public exploit EPSS 46%

    Jakarta Tomcat Directory Listing vulnerability

    Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2003-0044

    Jakarta Tomcat cross-site scripting (XSS) vulnerability

    Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2003-0035

    Buffer overflow in escputil, as included in the printer-drivers package in Mandrake Linux, allows local users to execut…

  • Unscored —
    CVE-2003-0036

    ml85p, as included in the printer-drivers package for Mandrake Linux, allows local users to overwrite arbitrary files v…

  • Unscored —
    CVE-2003-0034 Public exploit

    Buffer overflow in the mtink status monitor, as included in the printer-drivers package in Mandrake Linux, allows local…

  • Unscored —
    CVE-2003-0026 EPSS 19%

    Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE ca…

  • Unscored —
    CVE-2003-0031

    Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash).

    libmcrypt Debian
  • Unscored —
    CVE-2003-0025 EPSS 28%

    Multiple SQL injection vulnerabilities in IMP 2.2.8 and earlier allow remote attackers to perform unauthorized database…

  • Unscored —
    CVE-2002-1398

    Buffer overflow in the date parser for PostgreSQL before 7.2.2 allows attackers to cause a denial of service and possib…

  • Unscored —
    CVE-2002-1402

    Buffer overflows in the (1) TZ and (2) SET TIME ZONE enivronment variables for PostgreSQL 7.2.1 and earlier allow local…

  • Unscored —
    CVE-2002-1400

    Heap-based buffer overflow in the repeat() function for PostgreSQL before 7.2.2 allows attackers to execute arbitrary c…

  • Unscored —
    CVE-2002-1399

    Unknown vulnerability in cash_out and possibly other functions in PostgreSQL 7.2.1 and earlier, and possibly later vers…

  • Unscored —
    CVE-2002-1395

    Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obt…

    im Debian
  • Unscored —
    CVE-2002-1397

    Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of servi…

  • Unscored —
    CVE-2002-1401

    Buffer overflows in (1) circle_poly, (2) path_encode and (3) path_add (also incorrectly identified as path_addr) for Po…

  • Unscored —
    CVE-2002-1393

    Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a sh…

  • Unscored —
    CVE-2003-0001 Public exploit EPSS 73%

    Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote at…

  • Unscored —
    CVE-2002-0626

    Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary user…

  • Unscored —
    CVE-2002-0628

    The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which ma…

  • Unscored —
    CVE-2002-0629

    The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) vi…