Skip to content
OpenAdvisories

Archive

October 2003

Vulnerabilities first published in this month (UTC), newest first.

← September 2003 2003 / October November 2003 →
  1. 17
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 71
  8. 84
  9. 911
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 155
  16. 16 
  17. 179
  18. 18 
  19. 19 
  20. 20 
  21. 214
  22. 22 
  23. 23 
  24. 24 
  25. 2513
  26. 26 
  27. 27 
  28. 281
  29. 29 
  30. 3016
  31. 31 
All Critical High Medium Low Exploited only Public exploit

71 results · Feed

  • Unscored —
    CVE-2002-1570 Public exploit

    Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to exec…

  • Unscored —
    CVE-2003-0789 EPSS 12%

    mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could c…

    apache2 Debian
  • Unscored —
    CVE-2003-0880

    Unknown vulnerability in Mac OS X before 10.3 allows local users to access Dock functions from behind Screen Effects wh…

  • Unscored —
    CVE-2003-0899 Public exploit EPSS 22%

    Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2003-0883

    The System Preferences capability in Mac OS X before 10.3 allows local users to access secure Preference Panes for a sh…

  • Unscored —
    CVE-2003-0882

    Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine t…

  • Unscored —
    CVE-2003-0855

    Pan 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news post with a long author …

    pan Debian
  • Unscored —
    CVE-2003-0871

    Unknown vulnerability in QuickTime Java in Mac OS X v10.3 and Mac OS X Server 10.3 allows attackers to gain "unauthoriz…

  • Unscored —
    CVE-2003-0542 EPSS 30%

    Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to …

    apache2 Debian
  • Unscored —
    CVE-2003-0895

    Buffer overflow in the Mac OS X kernel 10.2.8 and earlier allows local users, and possibly remote attackers, to cause a…

  • Unscored —
    CVE-2003-0877

    Mac OS X before 10.3 with core files enabled allows local users to overwrite arbitrary files and read core files via a …

  • Unscored —
    CVE-2003-0876

    Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged (…

  • Unscored —
    CVE-2003-0881

    Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-…

  • Unscored —
    CVE-2003-0878

    slpd daemon in Mac OS X before 10.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary…

  • Unscored —
    CVE-2003-0683

    NFS in SGI 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an /etc/exports entry uses…

  • Unscored —
    CVE-2003-0901

    Buffer overflow in to_ascii for PostgreSQL 7.2.x, and 7.3.x before 7.3.4, allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2003-0898 Public exploit

    IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to overwrite arbitrary files and …

  • Unscored —
    CVE-2001-1412 Public exploit

    nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the password file by specifying p…

  • Unscored —
    CVE-2001-1411

    Format string vulnerability in gm4 (aka m4) on Mac OS X may allow local users to gain privileges if gm4 is called by se…

  • Unscored —
    CVE-2002-1569

    gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters…

    gv Debian
  • Unscored —
    CVE-2003-0850

    The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possib…

    libnids Debian
  • Unscored —
    CVE-2003-0896 Public exploit EPSS 14%

    The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4…

  • Unscored —
    CVE-2003-0894

    Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows …

  • Unscored —
    CVE-2003-0852

    Format string vulnerability in send_message.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP servers to caus…

  • Unscored —
    CVE-2003-0897

    "Shatter" vulnerability in CommCtl32.dll in Windows XP may allow local users to execute arbitrary code by sending (1) B…

  • Unscored —
    CVE-2003-0872

    Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activiti…

  • Unscored —
    CVE-2003-0853 Public exploit EPSS 11%

    An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or …

    coreutils Debian
  • Unscored —
    CVE-2003-0854 Public exploit

    ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, …

    coreutils Debian
  • Unscored —
    CVE-2003-0874

    Multiple SQL injection vulnerabilities in DeskPRO 1.1.0 and earlier allow remote attackers to insert arbitrary SQL and …

  • Unscored —
    CVE-2003-0875

    Symbolic link vulnerability in the slpd script slpd.all_init for OpenSLP before 1.0.11 allows local users to overwrite …

  • Unscored —
    CVE-2003-0794

    GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not limit the number or duration of commands and uses a bl…

  • Unscored —
    CVE-2003-0793

    GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not restrict the size of input, which allows attackers to …

  • Unscored —
    CVE-2003-0792

    Fetchmail 6.2.4 and earlier does not properly allocate memory for long lines, which allows remote attackers to cause a …

    fetchmail Debian
  • Unscored —
    CVE-2003-0870 Public exploit EPSS 15%

    Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a …

  • Unscored —
    CVE-2003-0660 EPSS 24%

    The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and instal…

  • Unscored —
    CVE-2003-0717 Public exploit EPSS 61%

    The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allo…

  • Medium —
    CVE-2003-0866 Public exploit EPSS 35%

    Apache Tomcat Denial of Service vulnerability in the Catalina package

    The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2003-0712 EPSS 20%

    Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Se…

  • Unscored —
    CVE-2003-0662 EPSS 38%

    Buffer overflow in Troubleshooter ActiveX Control (Tshoot.ocx) in Microsoft Windows 2000 SP4 and earlier allows remote …

  • Unscored —
    CVE-2003-0711 EPSS 37%

    Stack-based buffer overflow in the PCHealth system in the Help and Support Center function in Windows XP and Windows Se…