CVE-2003-1276

Netfone.exe of NetTelephone 3.5.6 is vulnerable due to weak encryption for user PINs and plaintext storage of account numbers in the registry (HKCU\Software\MediaRing.com\SDK\NetTelephone\settings). Local users could potentially gain unauthorized access to NetTelephone accounts. The connected doc...

CVE-2003-1259

CVE-2003-1259 is a buffer overflow in CuteFTP 4.2 and 5.0 that allows remote attackers to crash the application and potentially execute arbitrary code via a long FTP server banner. The issue affects CuteFTP client versions 4.2/5.0 and is triggered by handling an excessively long FTP banner, leadi...

CVE-2003-1274

Winamp 3.0 is affected by a denial-of-service vulnerability triggered when processing a specially crafted .b4s playlist file. The Playstring parameter can be supplied with a file: argument containing MS-DOS device names (e.g., aux), causing the player to crash. Public references in NVD/CVE record...

CVE-2003-1270

CVE-2003-1270 is a remote-denial-of-service vulnerability where an HTTP 1.41e server may be triggered by sending a long argument to aux.cgi, potentially causing a buffer overflow or MS-DOS device vulnerability. The connected documents confirm the issue exists and describe the impact as an unauthe...

CVE-2003-1237

The CVE-2003-1237 entry documents a cross-site scripting (XSS) vulnerability in WWWBoard 2.0A2.1 and earlier. The issue allows remote attackers to inject arbitrary HTML or web script via a message post. Affected software: WWWBoard versions up to 2.0A2.1 and earlier. The root cause is not explicit...

CVE-2003-1245

The CVE-2003-1245 issue affects Mambo Site Server (CMS) in version 4.0.12, where index2.php allows a remote attacker to gain administrator access by sending a URL with session_id set to the MD5 hash of a valid session cookie. Root cause is improper validation of cookies, enabling session imperson...

CVE-2003-1271

Technical details about CVE-2003-1271 are not publicly available in the provided documents; no explicit affected products, versions, or remediation are shown. Monitor for updates.

CVE-2003-1262

CVE-2003-1262 describes a buffer overflow in the http_fetch function of HTTP Fetcher 1.0.0 and 1.0.1. This bug allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via a URL request that uses unusually long (1) host, (2) referer, or (3) userAgent val...

CVE-2003-1264

The CVE-2003-1264 issue affects the TFTP server used by Longshine WAP LCS-883R-AC-B and by the D-Link DI-614+ 2.0 based on it. The vulnerability enables remote attackers to download the configuration file (config.img) and other files without authentication, allowing access to the WEP secret and e...

CVE-2003-1267

CVE-2003-1267 affects GuildFTPd 0.999. The vulnerability allows remote attackers to cause a denial of service (crash) via a GET request for MS-DOS device names such as lpt1. This conclusion is supported by multiple sources (NVD, CVE List) that reproduce the vendor description. The connected docum...

CVE-2003-1253

PHP remote file inclusion vulnerability in Bookmark4U 1.8.3 allows remote attackers to execute arbitrary PHP code viaa URL in the prefix parameter to 1 dbase.php, 2 config.php, or 3 common.load.php...

CVE-2003-1278

CVE-2003-1278 is an XSS vulnerability in OpenTopic 2.3.1 that allows remote attackers to inject arbitrary HTML/script into IMG tags, enabling execution of scripts as other users and potential cookie theft. Public descriptions from NVD and Red Hat state the issue as a cross-site scripting flaw aff...

CVE-2003-1263

CVE-2003-1263 affects the ICAL.EXE component in iCal 3.7. A malformed HTTP request (possibly due to an invalid method name) can cause a remote DoS crash. Public details consistently describe a crash condition without providing exploit code, vectors, or patched versions. The available records do n...

CVE-2003-1279

CVE-2003-1279 affects S-PLUS 6.0 and enables local users to overwrite arbitrary files via a symlink attack on multiple temporary files (e.g., /tmp/__F8499, /tmp/PRINT.$$.out, /tmp/SUBST$PID.TXT, /tmp/ed.cmds$PID, /tmp/file.1, /tmp/file.2, /tmp/sgml2html$$tmp, etc.). The underlying issue is a syml...

CVE-2003-1283

KaZaA Media Desktop (KMD) 2.0 launches advertisements in the Internet Explorer local security zone, which could allow a remote attacker to view local files and possibly execute arbitrary code. The issue centers on how KMD interacts with the IE zone privileges, as described across multiple sources...

CVE-2003-1266

The CVE-2003-1266 entry affects EServer servers (FTP, POP3, SMTP, and NNTP) version 2.92–2.97, and possibly 2.98. The underlying issue is that handling a large amount of data can be exploited by a remote attacker to cause a denial of service (crash). The connected Red Hat/CVE, CVE records, and EU...

CVE-2003-1253

Bookmark4U 1.8.3 suffers a PHP remote file inclusion vulnerability that allows an attacker to execute arbitrary PHP code by supplying a URL in the prefix parameter to dbase.php, config.php, or common.load.php. The issue enables code execution via user-supplied URL, with the NVD entry indicating N...

CVE-2003-1238

Cross-site scripting vulnerability XSS in Nuked-Klan 1.3 beta and earlier allows remote attackers to steal authentication information via cookies by injecting arbitrary HTML or script into op of the 1 Team, 2 News, and 3 Liens modules...

CVE-2003-1254

APB 1.1.01 is affected by a remote PHP code execution vulnerability. An attacker can cause arbitrary code execution by altering the APB_SETTINGS parameter to point to a remote URL containing code, via files head.php , apb_common.php , or apb_view_class.php . The root cause is loading code from a ...

CVE-2003-1249

CVE-2003-1249 affects WebIntelligence 2.7.1, where guessable user session cookies enable remote attackers to hijack sessions . The description specifies the vulnerability type as session hijacking due to predictable cookies; no additional technical details (e.g., exact cookie mechanism, versions ...