CVE-2003-1477

CVE-2003-1477 affects MAILsweeper for SMTP versions 4.3.6 and 4.3.7. A remote attacker can trigger a DoS by sending a PowerPoint attachment that is corrupt or contains embedded objects, causing CPU exhaustion and making the server unresponsive. Documents confirm the vulnerable product and the DoS...

CVE-2003-1492

CVE-2003-1492 affects Netscape Navigator 7.0.2 and Mozilla, where an HTTP request to a domain with a trailing dot can cause cross-domain cookie access. The connected ROSA advisory lists this CVE as Fixed and notes remediation as updating Firefox (DNF command reference: sudo dnf update firefox). T...

CVE-2003-1470

The CVE concerns MDaemon IMAP Service with versions 6.7.5 and earlier. A buffer overflow is triggered in the IMAP CREATE command when a mailbox name is excessively long, allowing a remote authenticated user to crash the service and potentially execute arbitrary code. The descriptions consistently...

CVE-2003-1478

CVE-2003-1478 affects Konqueror in KDE 3.0.3. A crafted web page that starts with a 0xFF 0xFE byte sequence and many CRLFs can trigger a denial of service (core dump). Documented example uses freeze.htm. The sources note the vulnerability and impact but do not provide patch/version details or exp...

CVE-2003-1466

CVE-2003-1466 affects Phorum 3.4–3.4.2. Unspecified vulnerability allows remote attackers to use Phorum as a proxy to other sites via (1) register.php or (2) login.php, enabling potential abuse of the application as a gateway to external hosts. The provided documents do not include concrete explo...

CVE-2003-1487

Phorum 3.4 through 3.4.2 contains multiple remote command-injection vulnerabilities that allow arbitrary command execution and modification of Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program. The root cause is not explicitly detailed beyond th...

CVE-2003-1488

CVE-2003-1488 affects TrueGalerie 1.0. The vulnerability resides in admin.php handling of parameters: when the request to admin.php omits the connect parameter and provides loggedin with any value, an attacker can gain administrator access. Numerous sources (NVD, CVE records, CVE List, Nessus/Nes...

CVE-2003-1489

upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the file cookie in form.php, then downloading the file from the image gallery...

CVE-2003-1479

CVE-2003-1479 is a documented cross-site scripting (XSS) vulnerability affecting webcamXP versions 1.02.432 and 1.02.535. The issue allows remote attackers to inject arbitrary web script or HTML through the message field. The NVD entry lists a CVSS v2 base score of 4.3 (MEDIUM) with network attac...

CVE-2003-1473

Summary of CVE-2003-1473 : A buffer overflow in LTris 1.0.1 (FreeBSD Ports Collection up to 2003-02-25 and earlier) allows local users to execute arbitrary code with gid "games" privileges by supplying a long HOME environment variable. Exploitation details, affected versions, and remediation are ...

CVE-2003-1475

CVE-2003-1475 concerns Netbus 1.5–1.7, where more than one client can connect concurrently but only the first connection is prompted for authentication. This misbehavior allows remote attackers to gain access to the system. Documents do not provide specific exploit steps or affected product versi...

CVE-2003-1468

Technical details beyond the CVE description are not provided in the supplied documents. Monitor for updates from authoritative sources to confirm affected versions, impact, and fixes.

CVE-2003-1482

CVE-2003-1482 affects the Microsoft MN-500 wireless base station. The issue is that the backup configuration file stores administrative passwords in plaintext, which enables local users to gain access. The available connected documents corroborate this exact description; no public details about a...

CVE-2003-1481

CommuniGate Pro versions 3.1–4.0.6 are affected by a flaw where the session ID is exposed in the Referer header of an image request. This enables remote attackers to hijack mail sessions by sending an email containing an IMG tag referencing a malicious URL that captures the Referer. Impact is use...

CVE-2003-1462

CVE-2003-1462 affects mod_survey 3.0.0 through 3.0.15-pre6. The issue arises because it does not validate whether a survey exists before creating a subdirectory, which can be exploited remotely to cause disk consumption and potentially crash the service (DoS). Exploitation details are not provide...

CVE-2003-1461

Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: the vendor was unable to reproduce the problem on a system that had been patched for an lp vulnerability CVE-2002-1473...

CVE-2003-1433

The CVE-2003-1433 description is supported: Unreal Engine versions 226f through 436 fail to validate the challenge key, enabling remote attackers to exhaust the player limit by joining the game multiple times. The connected sources confirm this problem as a heap of remote-access issue without det...

CVE-2003-1431

CVE-2003-1431 affects the Epic Games Unreal Engine versions 226f through 436. The vulnerability is a buffer overflow triggered by a long host string in the Unreal URL, enabling remote attackers to cause a denial of service (crash). The provided documents describe the affected software and the bas...

CVE-2003-1458

CVE-2003-1458 affects ttCMS 2.2 and ttForum via a SQL injection vulnerability in Profile.php, exploitable through the member name to execute arbitrary SQL commands. The vulnerability is remote and the documented impact is partial confidentiality, integrity, and availability. Exploitation details ...

CVE-2003-1454

Affected software: Invision Board 1.0–1.1.1. Vulnerability: when a forum is password protected, the administrator password is stored in plaintext in a cookie, risking unauthorized access. Impact: potential remote access by attackers due to cookie exposure. Root cause: insecure handling of session...