Skip to content
OpenAdvisories

Archive

August 2003

Vulnerabilities first published in this month (UTC), newest first.

← July 2003 2003 / August September 2003 →
  1. 115
  2. 212
  3. 3 
  4. 4 
  5. 512
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 1412
  15. 154
  16. 16 
  17. 17 
  18. 185
  19. 19 
  20. 20 
  21. 212
  22. 228
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

70 results · Feed

  • Unscored —
    CVE-2003-0540 Public exploit EPSS 21%

    The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (…

    postfix Debian
  • Unscored —
    CVE-2003-0617

    mindi 0.58 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.

  • Unscored —
    CVE-2003-0650

    Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attack…

  • Unscored —
    CVE-2003-0641

    WatchGuard ServerLock for Windows 2000 before SL 2.0.3 allows local users to load arbitrary modules via the OpenProcess…

  • Unscored —
    CVE-2003-0632

    Buffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI program (FNDWRR.exe) of Oracle E-Business Sui…

  • Unscored —
    CVE-2003-0639

    Unknown vulnerability in Novell iChain 2.2 before Support Pack 1 allows users to access restricted or secure pages with…

  • Unscored —
    CVE-2003-0640

    BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to ov…

  • Unscored —
    CVE-2003-0631

    VMware GSX Server 2.5.1 build 4968 and earlier, and Workstation 4.0 and earlier, allows local users to gain root privil…

  • Unscored —
    CVE-2003-0634

    Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, a…

  • Unscored —
    CVE-2003-0635

    Unknown vulnerability or vulnerabilities in Novell iChain 2.2 before Support Pack 1, with unknown impact, possibly rela…

  • Unscored —
    CVE-2003-0636

    Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerato…

  • Unscored —
    CVE-2003-0638

    Multiple buffer overflows in Novell iChain 2.1 before Field Patch 3, and iChain 2.2 before Field Patch 1a, allow attack…

  • Unscored —
    CVE-2003-0633

    Multiple vulnerabilities in aoljtest.jsp of Oracle Applications AOL/J Setup Test Suite in Oracle E-Business Suite 11.5.…

  • Unscored —
    CVE-2003-0637

    Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes i…

  • Unscored —
    CVE-2003-0642

    WatchGuard ServerLock for Windows 2000 before SL 2.0.4 allows local users to access kernel memory via a symlink attack …

  • Unscored —
    CVE-2003-0619 Public exploit EPSS 11%

    Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers t…

  • Unscored —
    CVE-2003-0616

    Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers …

  • Unscored —
    CVE-2003-0606

    sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.

    sup Debian
  • Unscored —
    CVE-2003-0625 Public exploit

    Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malfor…

    xfstt Debian
  • Unscored —
    CVE-2003-0610

    Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbi…

  • Unscored —
    CVE-2003-0459

    KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host…

  • Unscored —
    CVE-2003-0148

    The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary …

  • Unscored —
    CVE-2003-0614 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert a…

  • Unscored —
    CVE-2003-0149

    Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to …

  • Unscored —
    CVE-2003-0575

    Heap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier ve…

  • Unscored —
    CVE-2003-0609 Public exploit

    Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root pr…

  • Unscored —
    CVE-2003-0620 Public exploit

    Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via …

    man-db Debian
  • Unscored —
    CVE-2003-0466 Public exploit EPSS 78%

    Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to ex…

  • Unscored —
    CVE-2003-0615

    Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a U…

    perl Debian
  • Unscored —
    CVE-2003-0611 Public exploit

    Multiple buffer overflows in xtokkaetama 1.0 allow local users to gain privileges via a long (1) -display command line …