CVE-2003-1400

The CVE-2003-1400 entry describes a Cross-site scripting (XSS) vulnerability in the Your_Account module of PHP-Nuke versions 5.0 through 6.0. The issue arises from an input vector in the user_avatar parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected software: PH...

CVE-2003-1374

Technical details about CVE-2003-1374 are not provided in the connected documents. The sources mainly restate the buffer overflow description without specifics on affected versions, root cause, or fixes. Monitor for updates.

CVE-2003-1394

The CVE-2003-1394 entry concerns CoffeeCup Software Password Wizard 4.0. Affected component/file: the .apw file stored under the web document root. Root-cause: insufficient access control on the stored credentials, enabling remote attackers to obtain usernames and passwords via a direct request t...

CVE-2003-1392

CryptoBuddy 1.0 and 1.2 are affected by a cryptographic weakness: the application does not use the user-supplied passphrase to encrypt data, potentially allowing local users to decrypt data with their own passphrase. The underlying cause is improper use of the passphrase in encryption, leading to...

CVE-2003-1384

The CVE-2003-1384 entry describes a Cross-site scripting (XSS) vulnerability in PY-Livredor 1.0, specifically in index.php. The affected component is the web form fields (titre, Votre pseudo, Votre e-mail, Votre message). The underlying cause is improper handling of user-supplied input, enabling ...

CVE-2003-1389

The vulnerability concerns RTS CryptoBuddy 1.2 and earlier. It truncates long passphrases without warning, which may enable more effective brute‑force guessing attacks by reducing input length visibility. Impact is described as potentially facilitating such attacks with partial confidentiality ex...

CVE-2003-1396

CVE-2003-1396 describes a heap-based buffer overflow in Opera versions 6.05 through 7.10 triggered by a filename with a long extension. This enables remote attackers to cause a denial of service (crash) and possibly execute arbitrary code. The root cause is a vulnerable handling of file extension...

CVE-2003-1375

The CVE-2003-1375 entry describes a buffer overflow in the HP-UX wall utility for HP-UX 10.20–11.11, potentially allowing a local attacker to execute arbitrary code by passing a large file as an argument. Affected component: wall on HP-UX; root cause is a buffer overflow when handling a large arg...

CVE-2003-1391

The provided data identifies CVE-2003-1391 affecting RTS CryptoBuddy 1.0 and 1.2, where a weak encryption algorithm for the passphrase and generation of predictable keys are cited as the underlying flaws, making passphrase guesses easier. The CVSS metrics indicate a high-severity, network-attack ...

CVE-2003-1399

Removed by vendor...

CVE-2003-1387

CVE-2003-1387 : A buffer overflow in Opera 6.05 and 6.06 (and possibly other versions) can be triggered by a URL containing a long username, allowing a remote attacker to potentially execute arbitrary code. The connected NVD entry confirms the vulnerability details but does not specify a patch ve...

CVE-2003-1399

eject 2.0.10, when installed setuid on systems such as SuSE Linux 7.3, generates different error messages depending on whether a specified file exists or not, which allows local users to obtain sensitive information...

CVE-2003-1397

The CVE-2003-1397 entry affects Opera 6.05 and Opera 7.0. A crafted HTTP request containing a long string is passed to the ShowDocument method via the PluginContext object, causing a denial of service (crash). The provided documents state this as the vulnerability without detailing exploitable st...

CVE-2003-1379

CVE-2003-1379 affects ClarkConnect Linux 1.2: the clarkconnectd service exposes information about the host to remote unauthenticated users. The vulnerability allows an attacker to retrieve sensitive data by triggering the service to reveal details via specific indicators (A: date/time; F; M: ifco...

CVE-2003-1378

Technical details for CVE-2003-1378 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins for affected products and fixes.

CVE-2003-1399

CVE-2003-1399 relates to eject 2.0.10 installed with setuid on systems like SuSE Linux 7.3. The issue is that error messages vary depending on whether a specific file exists, enabling local users to obtain sensitive information. The consolidated documents confirm the vulnerable component (eject 2...

CVE-2003-1380

CVE-2003-1380 describes a directory traversal vulnerability in BisonFTP Server 4 release 2 that allows remote attackers to list directories above the root with commands like 'ls @../' or 'mget @../FILE' . The root cause is improper handling of path traversal in the FTP server, enabling access to ...

Macrovision SafeDisc - SecDRV.SYS Method_Neither Privilege Escalation

Macrovision SafeDisc - SecDRV.SYS MethodNeither Privilege Escalation source: https://www.securityfocus.com/bid/26121/info Macrovision SafeDisc is prone to a local privilege-escalation vulnerability because it fails to adequately sanitize user-supplied input. Exploiting this vulnerability allows...

Macrovision SafeDisc - 'SecDRV.SYS' Method_Neither Privilege Escalation

source: https://www.securityfocus.com/bid/26121/info Macrovision SafeDisc is prone to a local privilege-escalation vulnerability because it fails to adequately sanitize user-supplied input. Exploiting this vulnerability allows local attackers to execute arbitrary malicious code with SYSTEM-level...

CVE-2003-1358

The CVE-2003-1358 entry concerns rs.F300 on HP-UX 10.0–11.22 where the PATH environment is used to locate and execute programs (e.g., rm) with elevated privileges. This allows local users to gain privileges by pointing PATH to a malicious rm. Affected software is HP-UX (rs.F300). Root cause is PA...