Archive
June 2003
Vulnerabilities first published in this month (UTC), newest first.
112 results · Feed
-
Unscored —CVE-2003-0409 Public exploit
Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service (crash) and poss…
-
Unscored —
Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could al…
-
Unscored —
OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled,…
-
Unscored —CVE-2003-0385 Public exploit
Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long …
-
Unscored —CVE-2003-0394 Public exploit
objects.inc.php4 in BLNews 2.1.3 allows remote attackers to execute arbitrary PHP code via a Server[path] parameter tha…
-
Unscored —CVE-2003-0391 Public exploit
Format string vulnerability in Magic WinMail Server 2.3, and possibly other 2.x versions, allows remote attackers to ca…
-
Unscored —
Buffer overflow in Eterm 0.9.2 allows local users to gain privileges via a long ETERMPATH environment variable.
-
Unscored —CVE-2003-0395 Public exploit
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges vi…
-
Unscored —
Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Inter…
-
Unscored —CVE-2003-0380 Public exploit
Buffer overflow in atftp daemon (atftpd) 0.6.1 and earlier, and possibly later versions, allows remote attackers to cau…
-
Unscored —CVE-2003-0396 Public exploit
Buffer overflow in les for ATM on Linux (linux-atm) before 2.4.1, if used setuid, allows local users to gain privileges…
-
Unscored —
Directory traversal vulnerability in ST FTP Service 3.0 allows remote attackers to list arbitrary directories via a CD …
-
Unscored —CVE-2003-0390 Public exploit
Multiple buffer overflows in Options Parsing Tool (OPT) shared library 3.18 and earlier, when used in setuid programs, …
-
Unscored —
znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files.
-
Unscored —
Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, a different set of vulnerab…
-
Unscored —CVE-2003-0372 Public exploit
Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to caus…
-
Unscored —CVE-2003-0375 Public exploit
Cross-site scripting (XSS) vulnerability in member.php of XMBforum XMB 1.8.x (aka Partagium) allows remote attackers to…
-
Unscored —CVE-2003-0376 Public exploit
Buffer overflow in Eudora 5.2.1 allows remote attackers to cause a denial of service (crash and failed restart) and pos…
-
Unscored —CVE-2003-0371 Public exploit
Buffer overflow in Prishtina FTP client 1.x allows remote FTP servers to cause a denial of service (crash) and possibly…
-
Unscored —
The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, ma…
-
Unscored —CVE-2003-0377 Public exploit
SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versi…
-
Unscored —
Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a …
-
Unscored —
Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via…
-
Unscored —CVE-2002-1155 Public exploit
Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command …
-
Unscored —
Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fau…
-
Unscored —
Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which…
-
Unscored —
The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (C…
-
Unscored —
The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.
-
Unscored —
ICQLite 2003a creates the ICQ Lite directory with an ACE for "Full Control" privileges for Interactive Users, which all…
-
Unscored —
Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER …
-
Unscored —
Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service ("kernel o…
-
Unscored —
CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port …