Archive
May 2003
Vulnerabilities first published in this month (UTC), newest first.
121 results · Feed
-
Unscored —CVE-2002-1564 EPSS 12%
Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a coo…
-
Unscored —CVE-2003-0358 Public exploit
Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allo…
-
Unscored —
FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting it…
-
Unscored —
Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could al…
-
Unscored —
Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of se…
-
Unscored —CVE-2003-0189 EPSS 15%
The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using t…
-
Unscored —CVE-2003-0223 EPSS 17%
Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in Microsoft Internet Informat…
-
Unscored —CVE-2003-0224 EPSS 18%
Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitr…
-
Unscored —
gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf…
-
Unscored —
Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.4…
-
Unscored —
Buffer overflow in gPS before 0.10.2 may allow local users to cause a denial of service (SIGSEGV) in rgpsp via long com…
-
Unscored —
Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitra…
-
Unscored —
Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service …
-
Unscored —
Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a lo…
-
Unscored —
The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass acce…
-
Unscored —
The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Servi…
-
Unscored —CVE-2003-0225 EPSS 38%
The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory re…
-
Unscored —CVE-2003-0338 Public exploit
Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execu…
-
Unscored —
Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, which allows attackers to …
-
Unscored —CVE-2003-0339 Public exploit
Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote attackers to execute arbi…
-
Unscored —
BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords i…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Owl Intranet Engine 0.71 and earlier allows remote attackers to insert arbi…
-
Unscored —CVE-2003-0317 Public exploit
iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded char…
-
Unscored —
The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute arbitrary programs by…
-
Unscored —
BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not ex…
-
Unscored —CVE-2003-0336 Public exploit
Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a carriage return (CR) …
-
Unscored —
Multiple buffer overflows in kermit in HP-UX 10.20 and 11.00 (C-Kermit 6.0.192 and possibly other versions before 8.0) …
-
Unscored —
BitchX IRC client 1.0c20cvs and earlier allows attackers to cause a denial of service (core dump) via certain channel m…
-
Unscored —
rc.M in Slackware 9.0 calls quotacheck with the -M option, which causes the filesystem to be remounted and possibly res…
-
Unscored —CVE-2003-0332 Public exploit
The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a file…
-
Unscored —
Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denia…
-
Unscored —CVE-2003-0328 Public exploit
EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a…
-
Unscored —
Buffer overflow in the IMAP server (IMAPMax) for SmartMax MailMax 5.0.10.8 and earlier allows remote authenticated user…
-
Unscored —
Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of ser…
-
Unscored —
SQL injection vulnerability in ttForum allows remote attackers to execute arbitrary SQL and gain ttForum Administrator …
-
Unscored —
Buffer overflows in EPIC IRC Client (EPIC4) 1.0.1 allows remote malicious IRC servers to cause a denial of service (cra…
-
Unscored —
Buffer overflow in unknown versions of Maelstrom allows local users to execute arbitrary code via a long -player comman…
-
Unscored —
CesarFTP 0.99g stores user names and passwords in plaintext in the settings.ini file, which could allow local users to …
-
Unscored —
Integer overflow in parse_decode_path() of slocate may allow attackers to execute arbitrary code via a LOCATE_PATH with…
-
Unscored —CVE-2003-0325 Public exploit
Buffer overflow in Maelstrom 3.0.6, 3.0.5, and earlier allows local users to execute arbitrary code via a long -server …