Archive
September 2003
Vulnerabilities first published in this month (UTC), newest first.
105 results · Feed
-
Unscored —
ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, wh…
-
Unscored —
The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, w…
-
Unscored —
The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, doe…
-
Unscored —
The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows…
-
Unscored —
lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) cl…
-
Unscored —CVE-2003-0783 Public exploit
Multiple buffer overflows in hztty 2.0 allow local users to gain root privileges.
-
Unscored —
Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root pri…
-
Unscored —
The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service (crash) vi…
-
Unscored —
Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows …
-
Unscored —
ipmasq before 3.5.12, in certain configurations, may forward packets to the external interface even if the packets are …
-
Medium —
Apache Tomcat XSS Vulnerability
Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.
-
Unscored —CVE-2003-0759 Public exploit
Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privile…
-
Unscored —
SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment var…
-
Unscored —CVE-2003-0758 Public exploit
Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users to gain root privileg…
-
Unscored —CVE-2003-0805 Public exploit
Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary…
-
Unscored —
KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy,…
-
Unscored —
"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 …
-
Unscored —
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient…
-
Unscored —CVE-2003-0802 Public exploit
Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute…
-
Unscored —
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, …
-
Unscored —
Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute…
-
Unscored —
KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers …
-
Unscored —
Unknown vulnerability in NFS for SGI IRIX 6.5.21 and earlier may allow an NFS client to bypass read-only restrictions.
-
Unscored —CVE-2003-0803 Public exploit
Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the loca…
-
Unscored —CVE-2003-0693 EPSS 11%
A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to exe…
-
Unscored —
The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attac…
-
Unscored —
Per Magne Knutsen's CartMan shopping cart (cartman.php) 1.04 and earlier allows remote attackers to modify product pric…
-
Unscored —CVE-2003-0766 Public exploit
Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious s…
-
Unscored —
Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP) protocol implementation for …
-
Unscored —
Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows loca…
-
Unscored —
SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers …
-
Unscored —
Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arb…
-
Unscored —CVE-2003-0765 Public exploit
The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via …
-
Unscored —CVE-2003-0706 Public exploit
Unknown vulnerability in mah-jong 1.5.6 and earlier allows remote attackers to cause a denial of service (tight loop).
-
Unscored —
saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before th…
-
Unscored —CVE-2003-0760 Public exploit
Blubster 2.5 allows remote attackers to cause a denial of service (crash) via a flood of connections to UDP port 701.
-
Unscored —
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers wi…
-
Unscored —CVE-2003-0528 EPSS 41%
Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remot…
-
Unscored —CVE-2003-0767 Public exploit
Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and…