Skip to content
OpenAdvisories

Archive

June 2003

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 59
  6. 69
  7. 7 
  8. 8 
  9. 9 
  10. 1012
  11. 1121
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 1815
  19. 19 
  20. 2011
  21. 21 
  22. 22 
  23. 23 
  24. 244
  25. 25 
  26. 26 
  27. 27 
  28. 2831
  29. 29 
  30. 30 

112 results · Feed

  • Unscored —

    tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, w…

  • Unscored —

    Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unkn…

  • Unscored —

    password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other…

  • Unscored —
    CVE-2003-0483 Public exploit

    Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script…

  • Unscored —
    CVE-2003-0481 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script,…

  • Unscored —

    The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical di…

  • Unscored —

    The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the ca…

  • Unscored —
    CVE-2003-0478 Public exploit EPSS 12%

    Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2…

  • Unscored —
    CVE-2003-0470 Public exploit

    Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the …

  • Unscored —

    VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manip…

  • Unscored —

    Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request …

  • Unscored —
    CVE-2003-0488 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrar…

  • Unscored —
    CVE-2003-0492 Public exploit

    Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to e…

  • Unscored —
    CVE-2003-0482 Public exploit

    TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly acc…

  • Unscored —

    The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file…

  • Unscored —

    Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encryp…

  • Unscored —
    CVE-2003-0471 Public exploit EPSS 61%

    Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to W…

  • Unscored —
    CVE-2003-0486 Public exploit

    SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hash…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the guestbook for WebBBS allows remote attackers to insert arbitrary web sc…

  • Unscored —
    CVE-2003-0469 Public exploit EPSS 45%

    Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to caus…

  • Unscored —
    CVE-2003-0487 Public exploit EPSS 11%

    Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and p…

  • Unscored —

    eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via…

  • Unscored —

    ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does no…

  • Unscored —

    wzdftpd 0.1rc4 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command without an a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web scr…

  • Unscored —

    Directory traversal vulnerability in iWeb Server allows remote attackers to read arbitrary files via an HTTP request co…

  • Unscored —
    CVE-2003-0348 EPSS 20%

    A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Me…

  • Unscored —
    CVE-2003-0495 Public exploit

    Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a ne…

  • Unscored —
    CVE-2003-0349 Public exploit EPSS 80%

    Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability…

  • Unscored —

    Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code …

  • Unscored —

    The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service (hang) in inetd via port scanni…

  • Unscored —

    Multiple buffer overflows in xbl before 1.0k allow local users to gain privileges via certain long command line argumen…

  • Unscored —

    traceroute-nanog 6.1.1 allows local users to overwrite unauthorized memory and possibly execute arbitrary code via cert…

  • Unscored —

    Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a lon…

  • Unscored —

    Buffer overflows in osh before 1.7-11 allow local users to execute arbitrary code and bypass shell restrictions via (1)…

  • Unscored —
    CVE-2003-0436 Public exploit

    Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul pa…

  • Unscored —

    Buffer overflow in mikmod 3.1.6 and earlier allows remote attackers to execute arbitrary code via an archive file that …

  • Unscored —
    CVE-2003-0447 Public exploit EPSS 14%

    The Custom HTTP Errors capability in Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute script in t…

  • Unscored —

    Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overw…

  • Unscored —
    CVE-2003-0449 Public exploit

    Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to …