Archive
April 2003
Vulnerabilities first published in this month (UTC), newest first.
397 results · Feed
-
Unscored —CVE-2003-0222 EPSS 11%
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers…
-
Unscored —
Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute administrator commands by sniffing p…
-
Unscored —
The (1) dupatch and (2) setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allows local users to overwrite files and…
-
Unscored —
The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been …
-
Unscored —
mod_auth_any package in Red Hat Enterprise Linux 2.1 and other operating systems does not properly escape arguments whe…
-
Unscored —
Buffer overflow in PostMethod() function for Monkey HTTP Daemon (monkeyd) 0.6.1 and earlier allows remote attackers to …
-
Unscored —
Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows …
-
Unscored —
stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditi…
-
Unscored —
Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary file…
-
Unscored —CVE-2003-0114 EPSS 15%
The file upload control in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to automatically uplo…
-
Unscored —
gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to cause a denial of service (crash) via (1) l…
-
Unscored —
gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metach…
-
Unscored —
Unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to the enabl…
-
Unscored —
Buffer overflow in Windows Kernel allows local users to gain privileges by causing certain error messages to be passed …
-
Unscored —
handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes full and sets an array …
-
Unscored —
run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on te…
-
Unscored —CVE-2003-0215 Public exploit
SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via …
-
Unscored —
Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbit…
-
Unscored —
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length fi…
-
Unscored —CVE-2003-0116 EPSS 25%
Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check the Cascading Style Sheet input parameter for Mod…
-
Unscored —
Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows remote attackers to ca…
-
Unscored —
Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to exe…
-
Unscored —CVE-2003-0211 Public exploit
Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service (memory consumption) via a large numb…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Macromedia Flash ad user tracking capability allows remote attackers to ins…
-
Unscored —
psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/be…
-
Unscored —CVE-2003-0110 EPSS 18%
The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acc…
-
Unscored —
The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and In…
-
Unscored —CVE-2003-0196 EPSS 23%
Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial…
-
Unscored —
decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter,…
-
Unscored —
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x ver…
-
Unscored —
GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of service (crash) via certai…
-
Unscored —
Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files.
-
Unscored —CVE-2003-0171 Public exploit
DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows…
-
Unscored —
KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or …
-
Unscored —
ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers to overwrite arbitrary …
-
Unscored —
xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.
-
Unscored —
Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV en…
-
Unscored —CVE-2003-0203 Public exploit
Buffer overflow in moxftp 2.2 and earlier allows remote malicious FTP servers to execute arbitrary code via a long FTP …
-
Unscored —
Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the …
-
Unscored —
vsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers (tcp_wrappers) but is installed as a standalo…