CVE-2003-1324

Race condition in the canopen function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group...

GuppY 2.4 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/8768/info GuppY is reported to be prone to a cross-site scripting vulnerability due to insufficient sanitization of user-supplied input. The problem exists in the postguest module of the software. This issue may allow a remote attacker to execute HTML or...

CVE-2003-0550

The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to modify the bridge topology...

CVE-2003-0462

A race condition in the way envstart and envend pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service crash...

CVE-2003-0462

CVE-2003-0462 is a race condition in the Linux 2.4 kernel where env_start/env_end pointers used by the execve path (fs/proc/base.c) can lead to a local denial of service (kernel crash). Documented for several 2.4.x architectures (notably i386/alpha) and tracked in multiple advisories (e.g., Debia...

CVE-2003-0551

The CVE-2003-0551 entry concerns the STP protocol in Linux 2.4.x. According to the sources, STP input processing did not properly verify certain lengths, which could allow attackers to cause a denial of service. Public documents reference Red Hat RHSA-2003:239 and Debian DSA advisories (DSA-423-1...

CVE-2003-0550

CVE-2003-0550 concerns the STP support in Linux kernel 2.4.x. The vulnerability stems from the STP protocol implementation failing to provide adequate security, enabling attackers to modify the bridge topology. Public documents in the connected set confirm this issue across multiple advisories (e...

CVE-2003-0550

The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to modify the bridge topology...

CVE-2003-0552

Summary: CVE-2003-0552 affects the Linux kernel 2.4.x bridge handling, enabling remote attackers to spoof the bridge forwarding table by sending forged packets whose source addresses match the target. The vulnerability is described in multiple advisories (e.g., Debian DSA-423-1 and RHSA-2003:239)...

CVE-2003-0462

A race condition in the way envstart and envend pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service crash...

CVE-2003-0464

CVE-2003-0464 affects the Linux kernel (2.4) where a change in the RPC code sets the reuse flag for newly created sockets. This could allow a local attacker to bind UDP ports that are normally used by privileged services such as nfsd. The connected Red Hat advisory RHSA-2003:238 notes this issue ...

Linux Kernel 2.4 - SUID 'execve()' System Call Race Condition Executable File Read

/ source: https://www.securityfocus.com/bid/8042/info A race condition vulnerability has been discovered in the Linux execve system call, affecting the 2.4 kernel tree. The problem lies in the atomicity of placing a target executables file descriptor within the current process descriptor and...

CVE-2003-0248

CVE-2003-0248 affects the Linux kernel 2.4 series; the issue is in the mxcsr code, allowing an attacker to modify CPU state registers via a malformed address. Per available data, the impact is rated as complete confidentiality, integrity, and availability (base CVSS v2 score 10.0). The provided d...

CVE-2003-0364

CVE-2003-0364 affects the Linux kernel 2.4 series: TCP/IP fragment reassembly handling can be abused by crafted packets to trigger high CPU usage via hash table collisions, leading to a denial of service. Debians OpenVAS entries reference kernel updates (e.g., kernel-patch-2.4.18-powerpc, kernel-...

CVE-2003-0244

The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service CPU consumption via packets with forged source addresses that cause a large number of hash table collisions...

CVE-2003-0244

The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service CPU consumption via packets with forged source addresses that cause a large number of hash table collisions...

[email protected] Clients Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ========================================= email protected Clients Buffer Overflow Exploit ========================================= / email protected exploit by zillionatsafemode.org 2003/01/07 Credits for the vulnerability go to: SkyLined...

CVE-2002-0069

CVE-2002-0069 concerns Squid 2.4 STABLE3 and earlier with three issues per Mandrake MDKSA-2002:016-1: (1) memory leak in the SNMP interface that could allow remote DoS; (2) FTP URL handling buffer overflow that could cause DoS and possibly remote code execution (not confirmed); (3) HTCP interface...

CVE-2002-0068

CVE-2002-0068 affects Squid 2.4 STABLE3 and earlier, due to a buffer overflow in FTP URL parsing when the URL contains many special characters. This can cause a core dump (DoS) and, in some reports, may allow remote code execution. Mitigation: upgrade to Squid 2.4.STABLE4 or newer (and apply vend...

CVE-2002-0916

Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code via format strings in the user name, which are not properly handled in a syslog call...