Skip to content
OpenAdvisories

Archive

October 2003

Vulnerabilities first published in this month (UTC), newest first.

  1. 17
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 71
  8. 84
  9. 911
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 155
  16. 16 
  17. 179
  18. 18 
  19. 19 
  20. 20 
  21. 214
  22. 22 
  23. 23 
  24. 24 
  25. 2513
  26. 26 
  27. 27 
  28. 281
  29. 29 
  30. 3016
  31. 31 

71 results · Feed

  • Unscored —
    CVE-2003-0714 Public exploit EPSS 78%

    The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2003-0659 Public exploit EPSS 43%

    Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary c…

  • Unscored —
    CVE-2003-0865 Public exploit EPSS 15%

    Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arb…

  • Unscored —

    Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors.

  • Unscored —
    CVE-2003-0864 Public exploit

    Buffer overflow in m_join in channel.c for IRCnet IRCD 2.10.x to 2.10.3p3 allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2003-0863 Public exploit

    The php_check_safe_mode_include_dir function in fopen_wrappers.c of PHP 4.3.x returns a success value (0) when the safe…

  • Unscored —

    Integer overflows in (1) base64_encode and (2) the GD library for PHP before 4.3.3 have unknown impact and unknown atta…

  • Unscored —
    CVE-2003-0813 EPSS 17%

    A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote a…

  • Unscored —
    CVE-2003-0840 Public exploit

    Buffer overflow in dtprintinfo on HP-UX 11.00, and possibly other operating systems, allows local users to gain root pr…

  • Unscored —
    CVE-2003-0849 Public exploit EPSS 11%

    Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain pa…

  • Unscored —

    SuSEconfig.javarunt in the javarunt package on SuSE Linux 7.3Pro allows local users to overwrite arbitrary files via a …

  • Unscored —
    CVE-2003-0848 Public exploit

    Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privile…

  • Unscored —
    CVE-2003-0847 Public exploit

    SuSEconfig.susewm in the susewm package on SuSE Linux 8.2Pro allows local users to overwrite arbitrary files via a syml…

  • Unscored —

    The grid option in PeopleSoft 8.42 stores temporary .xls files in guessable directories under the web document root, wh…

  • Unscored —

    mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode without the Apache log…

  • Unscored —
    CVE-2003-0842 Public exploit

    Stack-based buffer overflow in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions…

  • Unscored —

    Format string vulnerability in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions…

  • Unscored —
    CVE-2003-0839 EPSS 14%

    Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote atta…

  • Unscored —
    CVE-2003-0845 Public exploit EPSS 15%

    Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the def…

  • Unscored —

    OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows r…

  • Unscored —
    CVE-2003-0809 Public exploit EPSS 27%

    Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data bind…

  • Unscored —

    Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a, allows attackers with "C…

  • Unscored —

    Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allow…

  • Unscored —
    CVE-2003-0838 Public exploit EPSS 38%

    Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creat…

  • Unscored —
    CVE-2003-0545 EPSS 87%

    Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly ex…

  • Unscored —

    Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary files via .. (dot dot)…

  • Unscored —
    CVE-2003-0543 Public exploit EPSS 27%

    Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL cli…

  • Unscored —

    OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote a…

  • Unscored —
    CVE-2003-0833 Public exploit

    Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by creating directories tha…

  • Unscored —
    CVE-2003-0830 Public exploit

    Buffer overflow in marbles 1.0.2 and earlier allows local users to gain privileges via a long HOME environment variable.

  • Unscored —
    CVE-2003-0835 Public exploit

    Multiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to execute arbitrary code …