Archive
June 2003
Vulnerabilities first published in this month (UTC), newest first.
112 results · Feed
-
Unscored —
tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, w…
-
Unscored —
Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unkn…
-
Unscored —
password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other…
-
Unscored —CVE-2003-0483 Public exploit
Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script…
-
Unscored —CVE-2003-0481 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script,…
-
Unscored —
The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical di…
-
Unscored —
The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the ca…
-
Unscored —
Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2…
-
Unscored —CVE-2003-0470 Public exploit
Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the …
-
Unscored —
VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manip…
-
Unscored —
Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request …
-
Unscored —CVE-2003-0488 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrar…
-
Unscored —CVE-2003-0492 Public exploit
Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to e…
-
Unscored —CVE-2003-0482 Public exploit
TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly acc…
-
Unscored —
The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file…
-
Unscored —
Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encryp…
-
Unscored —
Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to W…
-
Unscored —CVE-2003-0486 Public exploit
SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hash…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the guestbook for WebBBS allows remote attackers to insert arbitrary web sc…
-
Unscored —
Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to caus…
-
Unscored —
Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and p…
-
Unscored —
eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via…
-
Unscored —
ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does no…
-
Unscored —
wzdftpd 0.1rc4 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command without an a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web scr…
-
Unscored —
Directory traversal vulnerability in iWeb Server allows remote attackers to read arbitrary files via an HTTP request co…
-
Unscored —CVE-2003-0348 EPSS 20%
A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Me…
-
Unscored —CVE-2003-0495 Public exploit
Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a ne…
-
Unscored —
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability…
-
Unscored —
Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code …
-
Unscored —
The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service (hang) in inetd via port scanni…
-
Unscored —
Multiple buffer overflows in xbl before 1.0k allow local users to gain privileges via certain long command line argumen…
-
Unscored —
traceroute-nanog 6.1.1 allows local users to overwrite unauthorized memory and possibly execute arbitrary code via cert…
-
Unscored —
Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a lon…
-
Unscored —
Buffer overflows in osh before 1.7-11 allow local users to execute arbitrary code and bypass shell restrictions via (1)…
-
Unscored —CVE-2003-0436 Public exploit
Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul pa…
-
Unscored —
Buffer overflow in mikmod 3.1.6 and earlier allows remote attackers to execute arbitrary code via an archive file that …
-
Unscored —
The Custom HTTP Errors capability in Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute script in t…
-
Unscored —
Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overw…
-
Unscored —CVE-2003-0449 Public exploit
Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to …