Skip to content
OpenAdvisories

Archive

April 2003

Vulnerabilities first published in this month (UTC), newest first.

  1. 15
  2. 2350
  3. 34
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 82
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 1513
  16. 162
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2614
  27. 27 
  28. 28 
  29. 296
  30. 301

4 results · Clear filters · Feed

  • Medium —

    Apache Tomcat DoS Via Requests Including Null Characters

    Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of requests to the server with null characters, which causes the working threads to hang.

  • Medium —

    Zope Server vulnerable to DoS via header injection

    The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.

  • Medium —

    Zope allows attackers to modify raw image and file data

    Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.

  • Medium —

    Apache Tomcat Directory Traversal

    Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp.