Archive
April 2003
Vulnerabilities first published in this month (UTC), newest first.
397 results · Feed
-
Unscored —CVE-2002-1013 Public exploit
Buffer overflow in traffic_manager for Inktomi Traffic Server 4.0.18 through 5.2.2, Traffic Edge 1.1.2 and 1.5.0, and M…
-
Unscored —
The Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files without providing login cre…
-
Unscored —
Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arb…
-
Unscored —
Buffer overflow in AnalogX SimpleServer:Shout 1.0 allows remote attackers to cause a denial of service and execute arbi…
-
Unscored —CVE-2002-1006 Public exploit
Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1.5.11 and earlier …
-
Unscored —
Directory traversal vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to read arbitrary…
-
Unscored —
RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary…
-
Unscored —
Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service, and possibly exe…
-
Unscored —CVE-2002-1031 Public exploit
KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP reques…
-
Unscored —
Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2002-1004 Public exploit
Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows rem…
-
Unscored —
JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, w…
-
Unscored —
Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (cras…
-
Unscored —
Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long R…
-
Unscored —
Dynamic VPN Configuration Protocol service (DVCP) in Watchguard Firebox firmware 5.x.x allows remote attackers to cause…
-
Unscored —
Race condition in Performance Pack in BEA WebLogic Server and Express 5.1.x, 6.0.x, 6.1.x and 7.0 allows remote attacke…
-
Unscored —
Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execu…
-
Unscored —
Buffer overflow in Novell iManager (eMFrame 1.2.1) allows remote attackers to cause a denial of service (crash) via a l…
-
Unscored —
Omnicron OmniHTTPd 2.09 allows remote attackers to cause a denial of service (crash) via an HTTP request with a long, m…
-
Unscored —CVE-2002-1057 Public exploit
Buffer overflow in SmartMax MailMax POP3 daemon (popmax) 4.8 allows remote attackers to execute arbitrary code via a lo…
-
Unscored —
Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to execute arbitrary code…
-
Unscored —CVE-2002-1014 Public exploit
Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers t…
-
Unscored —
Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption…
-
Unscored —CVE-2002-1079 Public exploit
Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ (do…
-
Unscored —CVE-1999-1490 Public exploit
xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable.
-
Unscored —
FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in th…
-
Unscored —
rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modif…
-
Unscored —CVE-2000-0590 Public exploit
Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the data_dir para…
-
Unscored —
Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert S…
-
Medium —
Zope allows attackers to modify raw image and file data
Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.
-
High —
Zope does not properly perform security registration for legacy names
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.
-
Medium —
Apache Tomcat Directory Traversal
Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp.
-
Unscored —CVE-2003-0169 Public exploit
hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial o…
-
Unscored —
Heap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to gain root privileges …
-
Unscored —
The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain c…
-
Unscored —
Buffer overflow in Apple QuickTime Player 5.x and 6.0 for Windows allows remote attackers to execute arbitrary code via…
-
Unscored —
Stack-based buffer overflow in the bsd_queue() function for lpq on Solaris 2.6 and 7 allows local users to gain root pr…