Skip to content
OpenAdvisories

Archive

March 2003

Vulnerabilities first published in this month (UTC), newest first.

← February 2003 2003 / March April 2003 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 132
  14. 143
  15. 15 
  16. 16 
  17. 17 
  18. 1896
  19. 19 
  20. 20 
  21. 2113
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2611
  27. 272
  28. 281
  29. 298
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

136 results · Feed

  • Unscored —
    CVE-2003-0179

    Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute…

  • Unscored —
    CVE-2003-0178 EPSS 15%

    Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service o…

  • Unscored —
    CVE-2003-0181

    Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via a "Fictionary…

  • Unscored —
    CVE-2003-0165 Public exploit

    Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifie…

    eog Debian
  • Unscored —
    CVE-2003-0141

    The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other v…

  • Unscored —
    CVE-2003-0167

    Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, a…

    mutt balsa Debian
  • Unscored —
    CVE-2003-0180

    Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of service via an incomplete…

  • Unscored —
    CVE-2003-0172 Public exploit EPSS 19%

    Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote a…

  • Unscored —
    CVE-2003-0083 EPSS 19%

    Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access…

    apache2 Debian
  • Unscored —
    CVE-2003-0106

    The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URL…

  • Unscored —
    CVE-2003-0166 Public exploit EPSS 14%

    Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service…

  • Unscored —
    CVE-2002-0030

    The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a p…

  • Unscored —
    CVE-2002-1561 Public exploit EPSS 38%

    The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2003-0155

    bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.

  • Unscored —
    CVE-2003-0153 Public exploit

    bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog…

  • Unscored —
    CVE-2003-0162

    Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other users and …

  • Unscored —
    CVE-2003-0154 Public exploit

    Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2003-0159

    Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial…

  • Unscored —
    CVE-2003-0152

    Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www…

  • Unscored —
    CVE-2003-0082

    The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to caus…

    krb5 Debian
  • Unscored —
    CVE-2003-0160

    Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.2.11 allow remote attackers to inject arbi…

  • Unscored —
    CVE-2003-0072

    The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to caus…

    krb5 Debian
  • Unscored —
    CVE-2003-0151

    BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that per…

  • Unscored —
    CVE-2003-0150 Public exploit EPSS 45%

    MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SE…

  • Unscored —
    CVE-2003-0010 EPSS 24%

    Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various…

  • Unscored —
    CVE-2003-0138

    Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any…

    krb5 heimdal Debian
  • Unscored —
    CVE-2003-0011 EPSS 13%

    Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleratio…

  • Unscored —
    CVE-2003-0140

    Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code s…

    mutt Debian
  • Unscored —
    CVE-2003-0129 Public exploit EPSS 12%

    Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (memory consump…

    evolution Debian
  • Unscored —
    CVE-2003-0130 Public exploit EPSS 10%

    The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly esc…

    evolution Debian
  • Unscored —
    CVE-2003-0156

    Directory traversal vulnerability in Cross-Referencing Linux (LXR) allows remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2003-0131

    The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unaut…

    openssl Debian
  • Unscored —
    CVE-2003-0128 Public exploit EPSS 17%

    The try_uudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attac…

    evolution Debian
  • Unscored —
    CVE-2003-0139

    Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when tr…

    krb5 Debian
  • Unscored —
    CVE-2003-0028 EPSS 15%

    Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation)…

    glibc krb5 dietlibc Debian
  • Unscored —
    CVE-2002-0690

    Format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2002-1415

    Format string vulnerability in SMTP service for WebEasyMail 3.4.2.2 and earlier allows remote attackers to cause a deni…

  • Unscored —
    CVE-2002-1512 Public exploit

    xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink att…

  • Unscored —
    CVE-2002-1557

    Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, T…

  • Unscored —
    CVE-2002-1483 Public exploit

    db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP req…