CVE-2003-1357

Technical details about CVE-2003-1357 are not publicly available in the provided connected documents. Monitor for updates in the supplied sources; no explicit affected products, versions, or remediation details are present in the current set.

CVE-2003-1351

The CVE-2003-1351 issue affects EditTag 1.1, exposed via edittag.cgi. It is a directory traversal vulnerability that allows remote attackers to read arbitrary files by passing a encoded path like "%2F.." in the file parameter. The vulnerability can lead to partial confidentiality impact by exposi...

CVE-2003-1347

Geeklog 1.3.7 is affected by multiple XSS vulnerabilities. Attackers can inject arbitrary script via the (1) cid parameter to comment.php, (2) uid parameter to profiles.php, (3) uid to users.php, and (4) homepage field. The CVE-2003-1347 entry documents these issues and their cross-site scripting...

CVE-2003-1353

CVE-2003-1353 concerns multiple cross-site scripting (XSS) vulnerabilities in Outreach Project Tool (OPT) 0.946b, allowing remote attackers to inject arbitrary script/HTML via the news field.

CVE-2003-1350

CVE-2003-1350 affects List Site Pro 2.0. A remote attacker can hijack user accounts by inserting a pipe character into the bannerurl field, exploiting it as a delimiter. The available descriptions state this vulnerability condition but do not provide specifics on affected versions beyond List Sit...

CVE-2003-1355

Buffer overflow in the remote console rcon in Battlefield 1942 1.2 and 1.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long user name and password...

CVE-2003-1349

The CVE-2003-1349 entry describes a Directory traversal vulnerability in NITE ftp-server (NiteServer) 1.83. The issue occurs when a remote attacker uses a backslash-dot-dot sequence in the CWD command to traverse directories and list arbitrary paths. Documented impact includes partial confidentia...

CVE-2003-1355

CVE-2003-1355 concerns Battlefield 1942, affected in versions 1.2 and 1.3. A buffer overflow in the remote console (rcon) can be triggered by a long user name and password, enabling remote attackers to crash the server and potentially execute arbitrary code. The vulnerability is network-based and...

CVE-2003-1345

CVE-2003-1345 describes a directory traversal vulnerability in s.dll of WebCollection Plus 5.00, where remote attackers can view arbitrary files on the C: drive via a full pathname supplied in the d parameter. Affected software is WebCollection Plus 5.00 (s.dll); underlying root cause is improper...

CVE-2003-1342

The CVE-2003-1342 entry concerns Trend Micro Virus Control System (TVCS) 1.8 running on IIS, where remote attackers can trigger a denial of service by issuing multiple URL requests for ActiveSupport.exe, causing memory consumption on IIS. The available sources confirm the vendor/product/version a...

CVE-2003-1352

CVE-2003-1352 relates to Gabber 0.8.7, where an info-leak occurs because the client sends an email to a specific address during user login and logout. This behavior can let an attacker sniff (eavesdrop) user session activity and reveal the Gabber version number. The published data indicates a med...

Microsoft Windows RPC认证远程拒绝服务漏洞（MS07-058）

BUGTRAQ ID: 25974 CVECAN ID: CVE-2007-2228 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统在处理RPC认证时存在漏洞，远程攻击者可能利用此漏洞导致系统拒绝服务。 漏洞具体存在于RPC运行时库rpcrt4.dll解析RPC级认证消息期间。在解析认证类型为NTLMSSP且认证级别为PACKET的报文时，如果验证尾部签名被初始化为0而不是标准的NTLM签名，就会出现无效的内存引用。成功利用这个漏洞可能导致RPC服务及整个操作系统崩溃。 Microsoft Windows XP SP2 Microsoft...

Microsoft Windows柯达图像查看器远程代码执行漏洞（MS07-055）

BUGTRAQ ID: 25909 CVECAN ID: CVE-2007-2217 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的柯达图像查看器处理特制图像文件的方式中存在内存破坏漏洞，远程攻击者可能利用此漏洞通过诱使用户处理畸形数据控制用户系统。 攻击者可以通过构建特制图像来利用此漏洞，如果用户访问网站、查看特制电子邮件或者打开电子邮件附件，该漏洞可能允许远程执行指令。成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2...

Design/Logic Flaw

The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe...

CVE-2007-3896

CVE-2007-3896 affects Windows Shell32 (Windows XP/Server 2003 with IE7) where URL handling in the shell misparses invalid % sequences in mailto: or other URI handlers, allowing remote code execution. The issue can be triggered by launching external programs via URI handlers invoked by application...

Microsoft Security Bulletin MS07-057 - Critical Cumulative Security Update for Internet Explorer (939653)

Microsoft Security Bulletin MS07-057 - Critical Cumulative Security Update for Internet Explorer 939653 Published: October 9, 2007 Version: 1.0 General Information Executive Summary This critical security update resolves three privately reported vulnerabilities and one publicly disclosed...

Microsoft Security Bulletin MS07-055 - Critical Vulnerability in Kodak Image Viewer Could Allow Remote Code Execution (923810)

Microsoft Security Bulletin MS07-055 - Critical Vulnerability in Kodak Image Viewer Could Allow Remote Code Execution 923810 Published: October 9, 2007 Version: 1.0 General Information Executive Summary This critical security update resolves a privately reported vulnerability. A remote code...

Design/Logic Flaw

rpcrt4.dll aka the RPC runtime library in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista and Vista x64 Edition allows remote attackers to cause a denial of service RPCSS service stop and system restart via an...

CVE-2007-2228

rpcrt4.dll aka the RPC runtime library in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista and Vista x64 Edition allows remote attackers to cause a denial of service RPCSS service stop and system restart via an...

CVE-2007-2217

CVE-2007-2217 affects Kodak Image Viewer in Windows 2000 SP4 and, in some cases, XP SP2 and Server 2003 SP1/SP2. The issue is a memory-corruption/buffer overflow in TIFF handling that allows remote code execution when a user opens a specially crafted TIFF image. Microsoft issued MS07-055 with the...