CVE-2003-1120

The CVE-2003-1120 entry concerns SSH Tectia Server 4.0.3 and 4.0.4 on Unix where the password-change plugin (ssh-passwd-plugin) is enabled. The vulnerability is a race condition that allows local users to obtain the server’s private key. The connected documents confirm the affected product and th...

CVE-2003-1125

Affected software: Sun ONE Directory Server ns-ldapd (versions 4.16, 5.0, 5.1). Issue: a vulnerability allows LDAP clients to cause a denial of service (service halt). Root cause, exploit details, and remediation are not specified in the provided documents; no public details about fix/version are...

CVE-2003-1119

SSH Secure Shell prior to 3.2.9 is affected. The vulnerability allows remote DoS through malformed BER/DER packets, caused by an issue in processing those packets. Affected products are SSH Secure Shell versions 3.2.8 and earlier; remediation is to update to the latest version. Exploitation detai...

CVE-2003-1122

ScriptLogic 4.01, and possibly other versions before 4.14, uses insecure permissions for the LOGS$ share, which allows users to modify log records and possibly execute arbitrary code...

CVE-2003-1119

SSH Secure Shell before 3.2.9 allows remote attackers to cause a denial of service via malformed BER/DER packets...

CVE-2003-1123

The vulnerability affects Sun Java Runtime Environment (JRE) and SDK versions 1.4.0_01 and earlier. It allows untrusted applets to access certain information within trusted applets, effectively bypassing the Java security model’s restrictions and enabling information disclosure. No explicit explo...

CVE-2003-1124

Technical details about CVE-2003-1124 are not publicly provided in the supplied documents. No affected products, root cause, or fixes are described here. Monitor for updates in official advisories.

CVE-2003-1129

Vulnerability: Yahoo! Audio Conferencing (Voice Chat) ActiveX control prior to 1.0.0.45 is affected by a buffer overflow when processing a URL with a long hostname to Yahoo! Messenger/Chat. Impact: remote DoS and possible arbitrary code execution. Affected component: Yahoo! Audio Conferencing Act...

CVE-2003-1116

The CVE-2003-1116 entry concerns Oracle E-Business Suite components: Report Review Agent (RRA), also called FNDFS, in versions 10.7, 11.0, and 11.5.1 through 11.5.8. The vulnerability arises in the communications protocol used by these components, enabling remote attackers to bypass authenticatio...

CVE-2003-1127

Whale Communications e-Gap 2.5 on Windows 2000 allows remote attackers to obtain the source code for the login page via the HTTP TRACE method, which bypasses the preprocessor...

CVE-2003-1126

CVE-2003-1126 affects Sun One/iPlanet Web Server running on Windows platforms with SP3–SP5. The vulnerability permits remote denial of service, as described in multiple sources. The connected documents provide the same general impact and do not specify affected product versions beyond SP3–SP5 or ...

CVE-2003-1116

The communications protocol for the Report Review Agent RRA, aka FND File Server FNDFS program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing...

CVE-2003-1120

Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin ssh-passwd-plugin is enabled, allows local users to obtain the server's private key...

CVE-2003-1104

Buffer overflow in IBM Tivoli Firewall Toolbox TFST 1.2 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2003-1102

CVE-2003-1102 affects Hummingbird CyberDOCS versions 3.5, 3.9, and 4.0 when run on IIS. The root cause is insecure permissions on script source code files, enabling remote attackers to read the source code. The connected documents confirm the same description across multiple records (NVD, CVE Lis...

CVE-2003-1106

The CVE-2003-1106 entry describes a DoS condition in the SMTP service of Microsoft Windows 2000 prior to SP4. A remote attacker can crash or hang the service by sending an e-mail with a malformed FILETIME timestamp. The provided documents do not specify a patch or workaround; no exploit code or i...

CVE-2003-1108

The Session Initiation Protocol SIP implementation in Alcatel OmniPCX Enterprise 5.0 Lx allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite...

CVE-2003-1099

CVE-2003-1099 affects HP-UX B.11.00, B.11.04, and B.11.11. The issue arises when the system creates temporary files in /tmp with predictable names, enabling local users to cause a denial of service and potentially execute arbitrary code via a symlink attack. The underlying cause is the use of pre...

CVE-2003-1097

Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privileges via a long -l option...

CVE-2003-1114

The CVE-2003-1114 entry concerns Mediatrix Telecom SIP implementations on VoIP Access Devices and Gateways with SIPv2.4/SIPv4.3 firmware. A remote attacker can cause a denial of service or execute arbitrary code by sending crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip tests...