Archive
August 2003
Vulnerabilities first published in this month (UTC), newest first.
70 results · Feed
-
Unscored —
The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of ser…
-
Unscored —
Buffer overflow in Internet Explorer 6 SP1 for certain languages that support double-byte encodings (e.g., Japanese) al…
-
Unscored —
The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of ser…
-
Unscored —
The C-Media PCI sound driver in Linux before 2.4.21 does not use the get_user function to access userspace, which cross…
-
Unscored —CVE-2003-0532 EPSS 23%
Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, w…
-
Unscored —CVE-2003-0530 EPSS 30%
Buffer overflow in the BR549.DLL ActiveX control for Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers…
-
Unscored —
GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a s…
-
Unscored —CVE-2003-0531 EPSS 26%
Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer doma…
-
Unscored —
Buffer overflow in autorespond may allow remote attackers to execute arbitrary code as the autorespond user via qmail.
-
Unscored —CVE-2003-0353 EPSS 22%
Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote att…
-
Unscored —
The Name Service Daemon (nsd), when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier ve…
-
Unscored —
Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to caus…
-
Unscored —
The DNS callbacks in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, do not perform sufficient sa…
-
Unscored —
SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, whic…
-
Unscored —
Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local users to cause a co…
-
Unscored —CVE-2002-1566 Public exploit
netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to…
-
Unscored —
Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to exec…
-
Unscored —
Unknown vulnerability in the libcpr library for the Checkpoint/Restart (cpr) system on SGI IRIX 6.5.21f and earlier all…
-
Unscored —
Unknown vulnerability in the NFS daemon (nfsd) in SGI IRIX 6.5.19f and earlier allows remote attackers to cause a denia…
-
Unscored —
Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (aka Sun ONE) allows remote attacker…
-
Unscored —
Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the us…
-
Unscored —
Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via…
-
Unscored —CVE-2003-0649 Public exploit
Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long HOME env…
-
Unscored —
eroaster before 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file that is …
-
Unscored —
Buffer overflow in zblast-svgalib of zblast 1.2.1 and earlier allows local users to execute arbitrary code via the high…
-
Unscored —CVE-2003-0645 Public exploit
man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the ~/.manpath file, even when ru…
-
Unscored —
Unknown vulnerability in Solaris 2.6 through 9 causes a denial of service (system panic) via "a rare race condition" or…
-
Unscored —
up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsig…
-
Unscored —
Sustworks IPNetSentryX and IPNetMonitorX allow local users to sniff network packets via the setuid helper applications …
-
Unscored —
Multiple SQL injection vulnerabilities in the infolog module for phpgroupware 0.9.14 and earlier could allow remote att…
-
Unscored —
Cisco CSS 11000 routers on the CS800 chassis allow remote attackers to cause a denial of service (CPU consumption or re…
-
Unscored —
Unknown vulnerability in ip_nat_sack_adjust of Netfilter in Linux kernels 2.4.20, and some 2.5.x, when CONFIG_IP_NF_NAT…
-
Unscored —CVE-2003-0651 Public exploit
Buffer overflow in the mylo_log logging function for mod_mylo 0.2.1 and earlier allows remote attackers to execute arbi…
-
Unscored —
Buffer overflow in xtokkaetama allows local users to gain privileges via a long -nickname command line argument, a diff…
-
Unscored —CVE-2003-0655 Public exploit
rscsi in cdrtools 2.01 and earlier allows local users to overwrite arbitrary files and gain root privileges by specifyi…
-
Unscored —
Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other ho…
-
Unscored —CVE-2003-0647 Public exploit
Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via…
-
Unscored —
The OSI networking kernel (sys/netiso) in NetBSD 1.6.1 and earlier does not use a BSD-required "PKTHDR" mbuf when sendi…
-
Unscored —
The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack mod…
-
Unscored —
Multiple buffer overflows in ActiveX controls used by Trend Micro HouseCall 5.5 and 5.7, and Damage Cleanup Server 1.0,…