Skip to content
OpenAdvisories

Archive

November 2003

Vulnerabilities first published in this month (UTC), newest first.

← October 2003 2003 / November December 2003 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 54
  6. 69
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 124
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 1820
  19. 19 
  20. 20 
  21. 219
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

46 results · Feed

  • Unscored —
    CVE-2003-0939

    eo420_GetStringFromVarPart in veo420.c for SAP database server (SAP DB) 7.4.03.27 and earlier may allow remote attacker…

  • Unscored —
    CVE-2003-0945

    The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remot…

  • Unscored —
    CVE-2003-0938

    vos24u.c in SAP database server (SAP DB) 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malic…

  • Unscored —
    CVE-2003-0955 Public exploit

    OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrar…

  • Unscored —
    CVE-2003-0941

    web-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent Administration pages and modify co…

  • Unscored —
    CVE-2003-0940

    Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows remote attackers to read…

  • Unscored —
    CVE-2003-0944

    Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execut…

  • Unscored —
    CVE-2003-0943

    web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote at…

  • Unscored —
    CVE-2003-0942

    Buffer overflow in Web Agent Administration service in web-tools for SAP DB before 7.4.03.30 allows remote attackers to…

  • Unscored —
    CVE-2003-0812 Public exploit EPSS 82%

    Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers …

  • Unscored —
    CVE-2003-0951

    Partition Manager (parmgr) in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver,…

  • Unscored —
    CVE-2003-0824 EPSS 37%

    Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, …

  • Unscored —
    CVE-2003-0936

    Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help int…

  • Unscored —
    CVE-2003-0856

    iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as other users to the ke…

  • Unscored —
    CVE-2003-0858

    Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed mes…

  • Unscored —
    CVE-2003-0946

    Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, all…

    clamav Debian
  • Unscored —
    CVE-2003-0932

    Buffer overflow in omega-rpg 0.90 allows local users to execute arbitrary code via a long (1) command line or (2) envir…

    omega-rpg Debian
  • Unscored —
    CVE-2003-0947 Public exploit

    Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environ…

  • Unscored —
    CVE-2003-0628

    PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attack…

  • Unscored —
    CVE-2003-0089 Public exploit

    Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbit…

  • Unscored —
    CVE-2003-0859

    The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sendin…

  • Unscored —
    CVE-2003-0795 Public exploit

    The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking plac…

  • Unscored —
    CVE-2003-0950

    PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file t…

  • Unscored —
    CVE-2003-0821 EPSS 19%

    Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious…

  • Unscored —
    CVE-2003-0822 Public exploit EPSS 83%

    Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002…

  • Unscored —
    CVE-2003-0948 Public exploit

    Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable.

  • Unscored —
    CVE-2003-0629

    Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remo…

  • Unscored —
    CVE-2003-0937

    SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file…

  • Unscored —
    CVE-2003-0820 EPSS 26%

    Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the lengt…

  • Unscored —
    CVE-2003-0935

    Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be …

    net-snmp Debian
  • Unscored —
    CVE-2003-0886 Public exploit EPSS 13%

    Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code.

    hylafax Debian
  • Unscored —
    CVE-2003-0933

    Buffer overflow in conquest 7.2 and earlier may allow a local user to execute arbitrary code via a long environment var…

  • Unscored —
    CVE-2003-0934

    Symbol Access Portable Data Terminal (PDT) 8100 does not hide the default WEP keys if they are not changed, which could…

  • Unscored —
    CVE-2003-0927

    Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service (crash) …

  • Unscored —
    CVE-2003-0851

    OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 seq…

  • Unscored —
    CVE-2003-0926

    Ethereal 0.9.15 and earlier, and Tethereal, allows remote attackers to cause a denial of service (crash) via certain ma…

  • Unscored —
    CVE-2003-0834 Public exploit

    Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEAR…

  • Unscored —
    CVE-2003-0913

    Unknown vulnerability in the Terminal application for Mac OS X 10.3 (Client and Server) may allow "unauthorized access."

  • Unscored —
    CVE-2003-0925

    Buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service and possibly execut…

  • Unscored —
    CVE-2003-0565

    Multiple vulnerabilities in multiple vendor implementations of the X.400 protocol allow remote attackers to cause a den…