Archive
September 2004
Vulnerabilities first published in this month (UTC), newest first.
563 results · Feed
-
Unscored —CVE-2003-0143 Public exploit
The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprin…
-
Unscored —
The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service (crash) via an inv…
-
Unscored —
Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that …
-
Unscored —CVE-2003-0100 Public exploit
Buffer overflow in Cisco IOS 11.2.x to 12.0.x allows remote attackers to cause a denial of service and possibly execute…
-
Unscored —
TruBlueEnvironment for MacOS 10.2.3 and earlier allows local users to overwrite or create arbitrary files and gain root…
-
Unscored —
Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Window…
-
Medium —
Tomcat uses trusted privileges when processing web.xml file
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.
-
Unscored —CVE-2003-0825 EPSS 12%
The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, …
-
Unscored —
Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 …
-
Unscored —CVE-2003-0905 EPSS 26%
Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Se…
-
Unscored —
mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that pass…
-
Unscored —CVE-2003-0903 EPSS 37%
Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to ex…
-
Unscored —
Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to c…
-
Unscored —
A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /dev/random, …
-
Unscored —
The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence an…
-
Unscored —
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote …
-
Unscored —
ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an …
-
Unscored —
Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allo…
-
Unscored —
The "screen dump" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character escape se…
-
Unscored —
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly e…
-
Unscored —CVE-2003-0087 Public exploit
Buffer overflow in libIM library (libIM.a) for National Language Support (NLS) on AIX 4.3 through 5.2 allows local user…
-
Unscored —
The menuBar feature in aterm 0.42 allows attackers to modify menu options and execute arbitrary commands via a certain …
-
Unscored —
The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escap…
-
Unscored —CVE-2003-0102 Public exploit
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user run…
-
Unscored —
Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Stre…
-
Unscored —
The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows attackers to cause…
-
Unscored —
The default .htaccess scripts for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 do not …
-
Unscored —CVE-2003-0020 EPSS 16%
Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to inser…
-
High 7.3
The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain char…
-
Unscored —
The DEC UDK processing feature in the hanterm (hanterm-xf) terminal emulator before 2.0.5 allows attackers to cause a d…
-
Unscored —CVE-2003-0095 EPSS 13%
Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute ar…
-
Unscored —
Format string vulnerability in Nokia 6210 handset allows remote attackers to cause a denial of service (crash, lockup, …
-
Unscored —
The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world…
-
Unscored —
MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of s…
-
Unscored —
Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite…
-
Unscored —
The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain charac…
-
Unscored —
The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and th…
-
Unscored —
Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of se…
-
Unscored —
ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of…
-
Unscored —CVE-2003-0985 Public exploit
The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does…