CVE-2003-1192

CVE-2003-1192 describes a stack-based buffer overflow in IA WebMail Server 3.1.0 that allows remote attackers to execute arbitrary code via a long GET request. The connected sources confirm remote exploitation paths and a 3.x/3.1.0 vulnerable version, but the provided documents do not specify a p...

CVE-2003-1179

Summary of CVE-2003-1179 (Advanced Poll 2.0.2): The vulnerability consists of multiple PHP remote file inclusion flaws that allow an attacker to execute arbitrary PHP code. The issue is triggered via the include_path parameter in booth.php, png.php, poll_ssi.php, or popup.php, and the base_path p...

CVE-2003-1195

Technical details (affected products/versions/root cause/exploits) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2003-1133

CVE-2003-1133 affects Rit Research Labs The Bat! versions 1.0.11–2.0. The root cause is insecure ACLs used when creating new accounts, allowing local attackers to read other users’ email messages. The vulnerability is local and limited by the product’s access controls. KB/related advisories from ...

CVE-2003-1146

The CVE describes a cross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0, exploitable via the dir parameter to inject arbitrary script/HTML. Multiple sources (NVD, Red Hat, CVE List) confirm the issue and its description. No explicit exploitation details, vectors beyon...

CVE-2003-1148

CVE-2003-1148 affects J-Pierre DEZELUS Les Visiteurs 2.0.1 (used in phpMyConferences 8.0.2 and possibly other products). The vulnerability is a PHP remote file inclusion via a URL in the lvc_include_dir parameter used by common/visiteurs/include/ (config.inc.php and new-visitor.inc.php), allowing...

CVE-2003-1153

The CVE-2003-1153 entry concerns byteHoard versions 0.7 and 0.71, where an attacker can remotely enumerate files and directories by issuing a direct request to files.inc.php. The underlying issue is a lack of access control for directory/file listing, resulting in information disclosure (partial ...

CVE-2003-1180

CVE-2003-1180 describes a directory traversal vulnerability in Advanced Poll 2.0.2 . The issue allows remote attackers to read arbitrary files or inject arbitrary local PHP files by using “..” sequences in the parameters base_path or pollvars[lang] when accessing admin scripts (1) index.php, (2) ...

CVE-2003-1187

CVE-2003-1187 is a documented XSS vulnerability in PHPKIT, affecting versions 1.6.02 and 1.6.03. The issue resides in include.php where the contact_email parameter can be used by remote attackers to inject arbitrary script or HTML. The known impact is cross-site scripting, enabling credential-ste...

CVE-2004-2003

The CVE-2004-2003 issue affects DeleGate 8.9.2 and earlier, where a buffer overflow in the SSLway filter’s ssl_prcert function can be triggered by a certificate with an excessively long subject or issuer name. This could allow remote arbitrary code execution with the privileges of the DeleGate pr...

CVE-2003-1164

Cross-site scripting XSS vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HTML via the URI, which is injected into the HTML error page...

CVE-2003-1154

CVE-2003-1154 affects MAILsweeper for SMTP 4.3. remote attackers could bypass virus protection by sending a mail with a malformed ZIP attachment, exploiting certain MIMAIL variants. The cited documents do not provide the vulnerable version ranges beyond 4.3, nor a confirmed patch or workaround. N...

CVE-2003-1163

CVE-2003-1163 affects Ganglia gmond 2.5.3. The vulnerability arises in hash.c where a UDP packet containing a single-byte name string is used as an out-of-bounds array index, causing a remote denial of service (segmentation fault). Exploitation details are not provided beyond the description, and...

CVE-2003-1164

Removed by vendor...

CVE-2005-0061

The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests...

CVE-2005-1052

Microsoft Outlook 2003 and Outlook Web Access OWA 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses...

CVE-2005-0050

The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked buffer" and allows remote attackers to cause a denial of service crash and possibly execute arbitrary code, aka the...

CVE-2005-0049

Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote attackers to inject arbitrary HTML and web script via a cross-site scripting XSS attack, or to spoof the web cache...

CVE-2005-0738

Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service hang by deleting or moving a folder with deeply nested subfolders, which causes Microsoft Exchange Information Store service Store.exe to hang as a result of a large number of recursive...

CVE-2005-0551

Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System CSRSS process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long...