2003 CVEs (page 13)
Page 13 of 16 — CVEs published in 2003, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2003-0286 | | 2003-06-16 | SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary s… | |
CVE-2003-0285 | | 2003-06-16 | IBM AIX 5.2 and earlier distributes Sendmail with a configuration file (sendmail.cf) with the (1) promiscuous_relay, (2) accept_unresolvable_domains, and (3) a… | |
CVE-2003-0284 | | 2003-06-16 | Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the Plug-ins folder that spread… | |
CVE-2003-0283 | | 2003-06-16 | Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject arbitrary web script and HTML tags via a message with a "<<"… | |
CVE-2003-0282 | | 2003-06-16 | Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are… | |
CVE-2003-0281 | | 2003-06-16 | Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arb… | |
CVE-2003-0280 | | 2003-06-16 | Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (… | |
CVE-2003-0279 | | 2003-06-16 | Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5 allows remote attackers to steal sensitive information via numeric… | |
CVE-2003-0278 | | 2003-06-16 | Cross-site scripting (XSS) vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to insert arbitrary web script via th… | |
CVE-2003-0277 | | 2003-06-16 | Directory traversal vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to read arbitrary files via .. (dot dot) seq… | |
CVE-2003-0276 | | 2003-06-16 | Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GET request with a large… | |
CVE-2003-0275 | | 2003-06-16 | SSI.php in YaBB SE 1.5.2 allows remote attackers to execute arbitrary PHP code by modifying the sourcedir parameter to reference a URL on a remote web server t… | |
CVE-2003-0270 | | 2003-06-16 | The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protecting authentication… | |
CVE-2003-0248 | | 2003-06-16 | The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address. | |
CVE-2003-0247 | | 2003-06-16 | Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service ("kernel oops"). | |
CVE-2003-0246 | | 2003-06-16 | The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certa… | |
CVE-2003-0217 | | 2003-06-16 | Cross-site scripting (XSS) vulnerability in Neoteris Instant Virtual Extranet (IVE) 3.01 and earlier allows remote attackers to insert arbitrary web script and… | |
CVE-2003-0195 | | 2003-06-16 | CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (631), which does not time out. | |
CVE-2003-0420 | | 2003-06-13 | Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the account running the too… | |
CVE-2003-0362 | | 2003-06-09 | Buffer overflow in gPS before 0.10.2 may allow local users to cause a denial of service (SIGSEGV) in rgpsp via long command lines. | |
CVE-2003-0361 | | 2003-06-09 | gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized re… | |
CVE-2003-0360 | | 2003-06-09 | Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code. | |
CVE-2003-0358 | | 2003-06-09 | Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a… | |
CVE-2003-0357 | | 2003-06-09 | Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary cod… | |
CVE-2003-0356 | Critical | 9.8 | 2003-06-09 | Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via… |
CVE-2003-0355 | | 2003-06-09 | Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificat… | |
CVE-2003-0332 | | 2003-06-09 | The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a securi… | |
CVE-2003-0331 | | 2003-06-09 | SQL injection vulnerability in ttForum allows remote attackers to execute arbitrary SQL and gain ttForum Administrator privileges via the Ignorelist-Textfield… | |
CVE-2003-0330 | | 2003-06-09 | Buffer overflow in unknown versions of Maelstrom allows local users to execute arbitrary code via a long -player command line argument. | |
CVE-2003-0329 | | 2003-06-09 | CesarFTP 0.99g stores user names and passwords in plaintext in the settings.ini file, which could allow local users to gain privileges. | |
CVE-2003-0328 | | 2003-06-09 | EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly… | |
CVE-2003-0326 | | 2003-06-09 | Integer overflow in parse_decode_path() of slocate may allow attackers to execute arbitrary code via a LOCATE_PATH with a large number of ":" (colon) character… | |
CVE-2003-0325 | | 2003-06-09 | Buffer overflow in Maelstrom 3.0.6, 3.0.5, and earlier allows local users to execute arbitrary code via a long -server command line argument. | |
CVE-2003-0324 | | 2003-06-09 | Buffer overflows in EPIC IRC Client (EPIC4) 1.0.1 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code… | |
CVE-2003-0323 | | 2003-06-09 | Multiple buffer overflows in ircII 20020912 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via re… | |
CVE-2003-0322 | | 2003-06-09 | Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service (crash). | |
CVE-2003-0321 | | 2003-06-09 | Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service (crash) and possibly execut… | |
CVE-2003-0320 | | 2003-06-09 | header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms_user_admin parameter to "1" and modifying the adm… | |
CVE-2003-0319 | | 2003-06-09 | Buffer overflow in the IMAP server (IMAPMax) for SmartMax MailMax 5.0.10.8 and earlier allows remote authenticated users to execute arbitrary code via a long S… | |
CVE-2003-0318 | | 2003-06-09 | Cross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier allows remote attackers to insert arbitrary web script via the y… | |
CVE-2003-0309 | | 2003-06-09 | Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a larg… | |
CVE-2003-0307 | | 2003-06-09 | Poster version.two allows remote authenticated users to gain administrative privileges by appending the "|" field separator and an "admin" value into the email… | |
CVE-2003-0306 | | 2003-06-09 | Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.ini file with a long .ShellClassInfo para… | |
CVE-2003-0305 | | 2003-06-09 | The Service Assurance Agent (SAA) in Cisco IOS 12.0 through 12.2, aka Response Time Reporter (RTR), allows remote attackers to cause a denial of service (crash… | |
CVE-2003-0304 | | 2003-06-09 | one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation… | |
CVE-2003-0303 | | 2003-06-09 | SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg p… | |
CVE-2003-0245 | | 2003-06-09 | Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a den… | |
CVE-2003-0242 | | 2003-06-09 | IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which could allow traffic that is not explicitl… | |
CVE-2003-0241 | | 2003-06-09 | FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it… | |
CVE-2003-0240 | | 2003-06-09 | The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration… | |
CVE-2003-0227 | | 2003-06-09 | The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000… | |
CVE-2003-0226 | | 2003-06-09 | Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or… | |
CVE-2003-0225 | | 2003-06-09 | The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers, which… | |
CVE-2003-0224 | | 2003-06-09 | Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web page with a Server Si… | |
CVE-2003-0223 | | 2003-06-09 | Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in Microsoft Internet Information Server (IIS) 4.0, 5.0, and 5.1 allow… | |
CVE-2003-0194 | | 2003-06-09 | tcpdump does not properly drop privileges to the pcap user when starting up. | |
CVE-2003-0189 | | 2003-06-09 | The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which all… | |
CVE-2003-0188 | | 2003-06-09 | lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files… | |
CVE-2003-1068 | | 2003-06-06 | Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4659277, a different vulnerabil… | |
CVE-2003-1206 | | 2003-06-03 | Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crash) via "%s" or "%n" sequences in (1) the userna… | |
CVE-2003-1069 | | 2003-06-03 | The Telnet daemon (in.telnetd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (CPU consumption by infinite loop). | |
CVE-2003-0274 | | 2003-05-27 | Buffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute arbitrary code via a long ULISTPROC_UMASK value. | |
CVE-2003-0273 | | 2003-05-27 | Cross-site scripting (XSS) vulnerability in the web interface for Request Tracker (RT) 1.0 through 1.0.7 allows remote attackers to execute script via message… | |
CVE-2003-0272 | | 2003-05-27 | admin.php in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cookie to an "adminok" value. | |
CVE-2003-0271 | | 2003-05-27 | Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument. | |
CVE-2003-0269 | | 2003-05-27 | Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable. | |
CVE-2003-0268 | | 2003-05-27 | SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which revea… | |
CVE-2003-0267 | | 2003-05-27 | ShowGodLog.dll in SLWebMail 3 on Windows systems allows remote attackers to read arbitrary files by directly calling ShowGodLog.dll with an argument specifying… | |
CVE-2003-0266 | | 2003-05-27 | Multiple buffer overflows in SLWebMail 3 on Windows systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a… | |
CVE-2003-0265 | | 2003-05-27 | Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows lo… | |
CVE-2003-0264 | | 2003-05-27 | Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN ar… | |
CVE-2003-0263 | | 2003-05-27 | Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) 1.22 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2)… | |
CVE-2003-0262 | | 2003-05-27 | leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities r… | |
CVE-2003-0261 | | 2003-05-27 | fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges. | |
CVE-2003-0260 | | 2003-05-27 | Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service (slowdown and p… | |
CVE-2003-0259 | | 2003-05-27 | Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7 allows remote attackers to cause a denial of service (reload) via a… | |
CVE-2003-0258 | | 2003-05-27 | Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allo… | |
CVE-2003-0256 | | 2003-05-27 | The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows remote attackers to execute arbitrary comma… | |
CVE-2003-0255 | | 2003-05-27 | The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the… | |
CVE-2003-0244 | | 2003-05-27 | The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service (CPU consumption) via… | |
CVE-2003-0243 | | 2003-05-27 | Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter for the (1) normal_html… | |
CVE-2003-0239 | | 2003-05-27 | icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF89a headers that do… | |
CVE-2003-0238 | | 2003-05-27 | The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CPU consumption) by spoofing the address of an ADS… | |
CVE-2003-0237 | | 2003-05-27 | The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote atta… | |
CVE-2003-0236 | | 2003-05-27 | Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subject or (2) Date heade… | |
CVE-2003-0235 | | 2003-05-27 | Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the resp… | |
CVE-2003-0228 | | 2003-05-27 | Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary co… | |
CVE-2003-0339 | | 2003-05-22 | Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HTTP requests. | |
CVE-2003-0337 | | 2003-05-22 | The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute arbitrary programs by modifying the LSF_ENVDIR environment va… | |
CVE-2003-0336 | | 2003-05-22 | Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a carriage return (CR) character in a spoofed "Attachment Conve… | |
CVE-2003-0335 | | 2003-05-22 | rc.M in Slackware 9.0 calls quotacheck with the -M option, which causes the filesystem to be remounted and possibly reset security-relevant mount flags such as… | |
CVE-2003-0343 | | 2003-05-21 | BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid usern… | |
CVE-2003-0341 | | 2003-05-21 | Cross-site scripting (XSS) vulnerability in Owl Intranet Engine 0.71 and earlier allows remote attackers to insert arbitrary script via the Search field. | |
CVE-2003-0340 | | 2003-05-21 | Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, which allows attackers to steal login names and passwords to gain… | |
CVE-2003-0338 | | 2003-05-21 | Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequ… | |
CVE-2003-0342 | | 2003-05-20 | BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, w… | |
CVE-2003-0333 | | 2003-05-19 | Multiple buffer overflows in kermit in HP-UX 10.20 and 11.00 (C-Kermit 6.0.192 and possibly other versions before 8.0) allow local users to gain privileges via… | |
CVE-2003-0308 | | 2003-05-15 | The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (… | |
CVE-2003-0233 | | 2003-05-12 | Heap-based buffer overflow in plugin.ocx for Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via the Load() method, a dif… | |
CVE-2003-0222 | | 2003-05-12 | Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE… |