Archive
March 2004
Vulnerabilities first published in this month (UTC), newest first.
176 results · Feed
-
Unscored —
Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal …
-
Unscored —
Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends …
-
Unscored —CVE-2004-0349 Public exploit
Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot…
-
Unscored —
Buffer overflow in sdbscan in SignatureDB 0.1.1 allows local users to cause a denial of service (segmentation fault) vi…
-
Unscored —CVE-2004-0348 Public exploit
SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute ar…
-
Unscored —
Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to ex…
-
Unscored —
WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte (newline) is sent, which allows local u…
-
Unscored —CVE-2004-0312 Public exploit
Linksys WAP55AG 1.07 allows remote attackers with access to an SNMP read only community string to gain access to read/w…
-
Unscored —
Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (cr…
-
Unscored —
Buffer overflow in Avirt Soho 4.3 allows remote attackers to cause a denial of service (crash) via (1) a large GET requ…
-
Unscored —CVE-2004-0237 Public exploit
Directory traversal vulnerability in index.php in Aprox PHP Portal allows remote attackers to read arbitrary files via …
-
Unscored —CVE-2004-0299 Public exploit
Buffer overflow in smallftpd 0.99 allows local users to cause a denial of service (crash) via an FTP request with a lar…
-
Unscored —CVE-2004-0238 Public exploit
Multiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute arbitrary code in the clie…
-
Unscored —
The (1) inoregupdate, (2) uniftest, or (3) unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to ove…
-
Unscored —CVE-2004-0345 Public exploit
Buffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary code via a long serve…
-
Unscored —
Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and …
-
Unscored —
The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local …
-
Unscored —
The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via sy…
-
Unscored —CVE-2002-1576 Public exploit
lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which …
-
Unscored —
SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain p…
-
Unscored —
SAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a connection to a high-numbered …
-
Unscored —
The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to ob…
-
Unscored —
Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encode…
-
Unscored —
Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or…
-
Unscored —
Microsoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions on a web application …
-
Unscored —
The (1) halstead and (2) gather_stats scripts in metrics 1.0 allow local users to overwrite arbitrary files via a symli…
-
Unscored —
Opera allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded …
-
Unscored —CVE-2003-0514 Public exploit
Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (e…
-
Unscored —
Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a…
-
Unscored —
The RPM installation of SAP DB 7.x creates the (1) dbmsrv or (2) lserver programs with world-writable permissions, whic…
-
Unscored —
Multiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute arbitrary code via a …
-
Unscored —
The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instea…
-
Unscored —
The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information v…
-
Unscored —
The (1) instdbmsrv and (2) instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT enviro…
-
Unscored —
Format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS) allows remote attackers to…
-
Unscored —
Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to ex…
-
Unscored —CVE-2004-0158 Public exploit
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable…
-
Unscored —
Unknown vulnerability in ftpd in IBM AIX 5.2, when configured to use Kerberos 5 for authentication, allows remote attac…
-
Unscored —
Heap-based buffer overflow in GTKSee 0.5 and 0.5.1 allows remote attackers to execute arbitrary code via a PNG image of…
-
Unscored —
Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it …