Skip to content
OpenAdvisories

Archive

September 2003

Vulnerabilities first published in this month (UTC), newest first.

← August 2003 2003 / September October 2003 →
  1. 1 
  2. 2 
  3. 316
  4. 416
  5. 5 
  6. 615
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 1231
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 172
  18. 1810
  19. 195
  20. 20 
  21. 21 
  22. 22 
  23. 236
  24. 24 
  25. 254
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

44 results · Clear filters · Feed

  • Unscored —
    CVE-2003-0831 Public exploit EPSS 57%

    ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, wh…

  • Unscored —
    CVE-2003-0826 Public exploit EPSS 12%

    lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) cl…

    lsh-utils Debian
  • Unscored —
    CVE-2003-0783 Public exploit

    Multiple buffer overflows in hztty 2.0 allow local users to gain root privileges.

  • Medium —
    CVE-2002-1567 Public exploit EPSS 27%

    Apache Tomcat XSS Vulnerability

    Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2003-0759 Public exploit

    Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privile…

  • Unscored —
    CVE-2003-0758 Public exploit

    Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users to gain root privileg…

  • Unscored —
    CVE-2003-0805 Public exploit

    Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary…

    gopher Debian
  • Unscored —
    CVE-2003-0681 Public exploit EPSS 22%

    A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient…

    sendmail Debian
  • Unscored —
    CVE-2003-0802 Public exploit

    Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root…

  • Unscored —
    CVE-2003-0801 Public exploit EPSS 12%

    Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute…

  • Unscored —
    CVE-2003-0694 Public exploit EPSS 66%

    The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, …

    sendmail Debian
  • Unscored —
    CVE-2003-0803 Public exploit

    Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the loca…

  • Unscored —
    CVE-2003-0722 Public exploit EPSS 89%

    The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attac…

  • Unscored —
    CVE-2003-0766 Public exploit

    Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious s…

  • Unscored —
    CVE-2003-0765 Public exploit

    The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2003-0706 Public exploit

    Unknown vulnerability in mah-jong 1.5.6 and earlier allows remote attackers to cause a denial of service (tight loop).

    mah-jong Debian
  • Unscored —
    CVE-2003-0760 Public exploit

    Blubster 2.5 allows remote attackers to cause a denial of service (crash) via a flood of connections to UDP port 701.

  • Unscored —
    CVE-2003-0780 Public exploit EPSS 78%

    Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers wi…

  • Unscored —
    CVE-2003-0767 Public exploit

    Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and…

  • Unscored —
    CVE-2003-0772 Public exploit EPSS 85%

    Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly …

  • Unscored —
    CVE-2003-0770 Public exploit EPSS 11%

    FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains …

  • Unscored —
    CVE-2003-0762 Public exploit

    Buffer overflow in (1) foxweb.dll and (2) foxweb.exe of Foxweb 2.5 allows remote attackers to execute arbitrary code vi…

  • Unscored —
    CVE-2003-0763 Public exploit

    Cross-site scripting (XSS) vulnerability in Escapade Scripting Engine (ESP) allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2003-0720 Public exploit EPSS 13%

    Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-…

  • Unscored —
    CVE-2003-0769 Public exploit

    Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attackers to ins…

  • Unscored —
    CVE-2003-0705 Public exploit

    Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code.

    mah-jong Debian
  • Unscored —
    CVE-2003-0755 Public exploit

    Buffer overflow in sys_cmd.c for gtkftpd 1.0.4 and earlier allows remote attackers to execute arbitrary code by creatin…

  • Unscored —
    CVE-2003-0748 Public exploit

    Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote …

  • Unscored —
    CVE-2003-0749 Public exploit

    Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows …

  • Unscored —
    CVE-2003-0747 Public exploit

    wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensit…

  • Unscored —
    CVE-2003-0757 Public exploit

    Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces…

  • Unscored —
    CVE-2003-0752 Public exploit

    SQL injection vulnerability in global.php3 of AttilaPHP 3.0, and possibly earlier versions, allows remote attackers to …

  • Unscored —
    CVE-2003-0736 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2003-0347 Public exploit EPSS 55%

    Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3…

  • Unscored —
    CVE-2003-0665 Public exploit EPSS 30%

    Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote…

  • Unscored —
    CVE-2003-0735 Public exploit

    SQL injection vulnerability in the Calendar module of phpWebSite 0.9.x and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2003-0666 Public exploit EPSS 22%

    Buffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary code via modified data …

  • Unscored —
    CVE-2003-0740 Public exploit

    Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users t…

    stunnel4 stunnel Debian
  • Unscored —
    CVE-2003-0726 Public exploit

    RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation wi…

  • Unscored —
    CVE-2003-0686 Public exploit EPSS 27%

    Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote a…