Archive
March 2003
Vulnerabilities first published in this month (UTC), newest first.
56 results · Clear filters · Feed
-
Unscored —CVE-2003-0165 Public exploit
Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifie…
-
Unscored —
Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote a…
-
Unscored —
Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service…
-
Unscored —
The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service …
-
Unscored —CVE-2003-0153 Public exploit
bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog…
-
Unscored —CVE-2003-0154 Public exploit
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary…
-
Unscored —
MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SE…
-
Unscored —
Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (memory consump…
-
Unscored —
The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly esc…
-
Unscored —
The try_uudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attac…
-
Unscored —CVE-2002-1512 Public exploit
xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink att…
-
Unscored —CVE-2002-1483 Public exploit
db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP req…
-
Unscored —
Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of …
-
Unscored —CVE-2002-1527 Public exploit
emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed s…
-
Unscored —CVE-2002-1495 Public exploit
Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML …
-
Unscored —CVE-2002-1457 Public exploit
SQL injection vulnerability in search.php for L-Forum 2.40 allows remote attackers to execute arbitrary SQL statements …
-
Unscored —CVE-2002-1559 Public exploit
Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (…
-
Unscored —CVE-2002-1428 Public exploit
index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the user_cook…
-
Unscored —CVE-2002-1445 Public exploit
Cross-site scripting (XSS) vulnerability in CERN Proxy Server allows remote attackers to execute script as other users …
-
Unscored —CVE-2002-1473 Public exploit
Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of se…
-
Unscored —CVE-2002-1452 Public exploit
Buffer overflow in the search capability for MyWebServer 1.0.2 allows remote attackers to execute arbitrary code via a …
-
Unscored —
The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by…
-
Unscored —
Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value.
-
Unscored —CVE-2002-1423 Public exploit
tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the f…
-
Unscored —CVE-2002-1422 Public exploit
admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in t…
-
Unscored —
HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service (crash) via an SNMP write request…
-
Unscored —CVE-2002-1432 Public exploit
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sens…
-
Unscored —
SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP …
-
Unscored —CVE-2002-1492 Public exploit
Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, all…
-
Unscored —CVE-2002-1525 Public exploit
Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to …
-
Unscored —CVE-2002-1455 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd allow remote attackers to insert script or HTML into w…
-
Unscored —CVE-2002-1482 Public exploit
SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remot…
-
Unscored —
DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and atte…
-
Unscored —CVE-2002-1410 Public exploit
Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to (1) delete entries …
-
Unscored —CVE-2002-1503 Public exploit
Buffer overflow in Automatic File Distributor (AFD) 1.2.14 and earlier allows local users to gain privileges via a long…
-
Unscored —CVE-2002-1486 Public exploit
Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a…
-
Unscored —
The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of …
-
Unscored —CVE-2002-1429 Public exploit
Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML…
-
Unscored —CVE-2002-1488 Public exploit
The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) vi…
-
Unscored —CVE-2002-1453 Public exploit
Cross-site scripting (XSS) vulnerability in MyWebServer 1.0.2 allows remote attackers to insert script and HTML via a l…