December 2003

37 results · Feed

• Unscored —
  CVE-2003-0984

  Real time clock (RTC) routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which co…

  Dec 23, 2003
• Unscored —
  CVE-2003-1020

  The format_send_to_gui function in formats.c for irssi before 0.8.9 allows remote IRC users to cause a denial of servic…

  Dec 23, 2003
• Unscored —
  CVE-2003-0997

  Unknown "Denial of Service Attack" vulnerability in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 allows …

  Dec 17, 2003
• Unscored —
  CVE-2003-0963 Public exploit EPSS 15%

  Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers …

  lftp Debian
  Dec 17, 2003
• Unscored —
  CVE-2003-0999

  Unknown multiple vulnerabilities in (1) lpstat and (2) the libprint library in Solaris 2.6 through 9 may allow attacker…

  Dec 17, 2003
• Unscored —
  CVE-2003-0998

  Unknown "potential system security vulnerability" in Computer Associates (CA) Unicenter Remote Control 5.0 through 5.2,…

  Dec 17, 2003
• Unscored —
  CVE-2003-0996

  Unknown "System Security Vulnerability" in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 allows attackers…

  Dec 17, 2003
• Unscored —
  CVE-2003-0995 EPSS 10%

  Buffer overflow in the Microsoft Message Queue Manager (MSQM) allows remote attackers to cause a denial of service (RPC…

  Dec 17, 2003
• Unscored —
  CVE-2003-1002

  Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a…

  Dec 17, 2003
• Unscored —
  CVE-2003-1017 Public exploit

  Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web br…

  Dec 17, 2003
• Unscored —
  CVE-2003-1003

  Cisco PIX firewall 5.x.x, and 6.3.1 and earlier, allows remote attackers to cause a denial of service (crash and reload…

  Dec 17, 2003
• Unscored —
  CVE-2003-1013

  The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (cra…

  Dec 17, 2003
• Unscored —
  CVE-2003-1004

  Cisco PIX firewall 6.2.x through 6.2.3, when configured as a VPN Client, allows remote attackers to cause a denial of s…

  Dec 17, 2003
• Unscored —
  CVE-2003-1001

  Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remo…

  Dec 17, 2003
• Unscored —
  CVE-2003-1012

  The SMB dissector in Ethereal before 0.10.0 allows remote attackers to cause a denial of service via a malformed SMB pa…

  Dec 17, 2003
• Unscored —
  CVE-2003-1000

  xchat 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an invalid ID n…

  Dec 17, 2003
• Unscored —
  CVE-2003-0980

  Cross-site scripting (XSS) vulnerability in FreeScripts VisitorBook LE (visitorbook.pl) allows remote attackers to inje…

  Dec 11, 2003
• Unscored —
  CVE-2003-0979

  FreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which allows remote attacker…

  Dec 11, 2003
• Unscored —
  CVE-2003-0981

  FreeScripts VisitorBook LE (visitorbook.pl) logs the reverse DNS name of a visiting host, which allows remote attackers…

  Dec 11, 2003
• Unscored —
  CVE-2003-0983

  Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, which a…

  Dec 11, 2003
• Unscored —
  CVE-2003-0982

  Buffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11, and 5.x before 5.0.5, allows remote atta…

  Dec 11, 2003
• Unscored —
  CVE-2003-0978

  Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, a…

  Dec 10, 2003
• Unscored —
  CVE-2003-0962 EPSS 24%

  Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbit…

  rsync Debian
  Dec 10, 2003
• Unscored —
  CVE-2003-0976

  NFS Server (XNFS.NLM) for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:…

  Dec 10, 2003
• Unscored —
  CVE-2003-0977

  CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file syste…

  cvs Debian
  Dec 10, 2003
• Unscored —
  CVE-2003-0975

  Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from …

  Dec 10, 2003
• Unscored —
  CVE-2003-0327

  Sybase Adaptive Server Enterprise (ASE) 12.5 allows remote attackers to cause a denial of service (hang) via a remote p…

  Dec 10, 2003
• Unscored —
  CVE-2003-0961 Public exploit

  Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users t…

  Dec 2, 2003
• Unscored —
  CVE-2003-0914

  ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name s…

  Dec 2, 2003
• Unscored —
  CVE-2003-0970

  The Network Management Port on Sun Fire B1600 systems allows remote attackers to cause a denial of service (packet loss…

  Dec 2, 2003
• Unscored —
  CVE-2003-0960

  OpenCA before 0.9.1.4 does not use the correct certificate in a chain to check the serial, which could cause OpenCA to …

  Dec 2, 2003
• Unscored —
  CVE-2003-0973

  Unknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a deni…

  Dec 2, 2003
• Unscored —
  CVE-2003-0974 Public exploit

  Applied Watch Command Center allows remote attackers to conduct unauthorized activities without authentication, such as…

  Dec 2, 2003
• Unscored —
  CVE-2003-0972

  Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to exec…

  screen Debian
  Dec 2, 2003
• Unscored —
  CVE-2003-0971

  GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key compo…

  Dec 2, 2003
• Unscored —
  CVE-2003-0968

  Stack-based buffer overflow in SMB_Logon_Server of the rlm_smb experimental module for FreeRADIUS 0.9.3 and earlier all…

  freeradius Debian
  Dec 2, 2003
• Unscored —
  CVE-2003-0967 Public exploit

  rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RAD…

  freeradius Debian
  Dec 2, 2003