Archive
May 2003
Vulnerabilities first published in this month (UTC), newest first.
44 results · Clear filters · Feed
-
Unscored —CVE-2003-0358 Public exploit
Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allo…
-
Unscored —
Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.4…
-
Unscored —
Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a lo…
-
Unscored —
The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass acce…
-
Unscored —
The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Servi…
-
Unscored —CVE-2003-0338 Public exploit
Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execu…
-
Unscored —CVE-2003-0339 Public exploit
Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote attackers to execute arbi…
-
Unscored —CVE-2003-0317 Public exploit
iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded char…
-
Unscored —CVE-2003-0336 Public exploit
Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a carriage return (CR) …
-
Unscored —CVE-2003-0332 Public exploit
The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a file…
-
Unscored —CVE-2003-0328 Public exploit
EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a…
-
Unscored —CVE-2003-0325 Public exploit
Buffer overflow in Maelstrom 3.0.6, 3.0.5, and earlier allows local users to execute arbitrary code via a long -server …
-
Unscored —CVE-2003-0320 Public exploit
header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms_user_admi…
-
Unscored —CVE-2003-0314 Public exploit
Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) via a URL that ends in a "</" seq…
-
Unscored —CVE-2003-0306 Public exploit
Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.i…
-
Unscored —CVE-2003-0310 Public exploit
Cross-site scripting (XSS) vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitr…
-
Unscored —
Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary…
-
Unscored —CVE-2003-0303 Public exploit
SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary…
-
Unscored —CVE-2003-0312 Public exploit
Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to read arbitrary files via a .. …
-
Unscored —CVE-2003-0315 Public exploit
Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary co…
-
Unscored —CVE-2003-0304 Public exploit
one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calli…
-
Unscored —CVE-2003-0295 Public exploit
Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject ar…
-
Unscored —CVE-2003-0293 Public exploit
PalmOS allows remote attackers to cause a denial of service (CPU consumption) via a flood of ICMP echo request (ping) p…
-
Unscored —CVE-2003-0290 Public exploit
Memory leak in eServ 2.9x allows remote attackers to cause a denial of service (memory exhaustion) via a large number o…
-
Unscored —CVE-2003-0277 Public exploit
Directory traversal vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to r…
-
Unscored —CVE-2003-0281 Public exploit
Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase cod…
-
Unscored —
Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute ar…
-
Unscored —
Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters be…
-
Unscored —
Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbit…
-
Unscored —CVE-2003-0283 Public exploit
Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2003-0289 Public exploit
Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges…
-
Unscored —
The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a f…
-
Unscored —CVE-2003-0278 Public exploit
Cross-site scripting (XSS) vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attacke…
-
Unscored —CVE-2003-0243 Public exploit
Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to execute arbitrary commands via shell metacharacters in th…
-
Unscored —CVE-2003-0274 Public exploit
Buffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute arbitrary code via a long…
-
Unscored —
Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows …
-
Unscored —CVE-2003-0269 Public exploit
Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable.
-
Unscored —CVE-2003-0265 Public exploit
Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initi…
-
Unscored —CVE-2003-0262 Public exploit
leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges…
-
Unscored —
Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) 1.22 allow remote attackers to execute arbit…