CVE-2003-1091

Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via malformed ID3 tags in MP3 files...

CVE-2003-1094

Technical details for CVE-2003-1094 are not provided in the connected documents; only the BEA WebLogic 7.0 SP3 issue is described. Monitor for updates.

CVE-2003-1095

BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication information when a web application is redeployed, which could allow users of that application to gain access without having to re-authenticate...

CVE-2003-1094

BEA WebLogic Server and Express version 7.0 SP3 may follow certain code execution paths that result in an incorrect current user, such as in the frequent use of JNDI initial contexts, which could allow remote authenticated users to gain privileges...

CVE-2003-1095

BEA WebLogic Server/Express 7.0 and 7.0.0.1 are affected by CVE-2003-1095 due to improper handling of memory session persistence: authentication data is not cleared on redeploy, potentially allowing re-authenticated access without re-signing in. The issue is described across multiple feeds (NVD/N...

CVE-2003-1092

The provided materials indicate CVE-2003-1092 concerns the Automatic File Content Type Recognition (AFCTR) Tool included in the file package, affected in versions before 3.41, due to a memory allocation problem. The impact is described as unknown in the sources, with no explicit exploit, affected...

CVE-2003-1093

BEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inaccessible, may leak the user's password when it throws a ResourceAllocationException...

CVE-2003-1090

Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title...

CVE-2003-1090

CVE-2003-1090 describes a buffer overflow in AbsoluteTelnet prior to 2.12 RC10, allowing remote attackers to execute arbitrary code via a long window title. Affected product: AbsoluteTelnet; vulnerable component: window title handling; root cause: memory corruption due to overflow. Impact: remote...

Microsoft Exchange 2003 multiple nested folders DoS

Renaming or moving folder with large number of sub-folder causes service to stop...

Moving or removing folders with Outlook -- Exchange IS stops responding

FYI: Microsoft has released details about nasty bug with Exchange Server 2003 & SP1. "When you try to move or to remove a folder that contains many subfolders in Outlook, the Microsoft Exchange Information Store service stops responding, and event 9673 is recorded"...

CVE-2005-0688

Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service CPU consumption via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability CVE-1999-0016...

CVE-2003-1088

Cross-site scripting XSS vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML via the method parameter...

CVE-2003-1089

CVE-2003-1089 affects Zorum 3.4. The issue arises in index.php, where invalid parameter names trigger a PHP error message that reveals the full path to the web root. This path disclosure is the primary impact described in the available records; no exploitation steps or active exploit code are pro...

CVE-2003-1089

index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the path in a PHP error message...

MS Windows XP/2003 Remote Denial of Service Exploit

No description provided by source. / Added Line 1 - BSDSOURCE!!!! /str0ke / define BSDSOURCE include stdio.h include ctype.h include sys/socket.h include netinet/in.h include netinet/insystm.h include netinet/ip.h include netinet/tcp.h include sysexits.h include stdlib.h include unistd.h include...

Microsoft Windows XP/2003 - Remote Denial of Service

/ Added Line 1 - BSDSOURCE!!!! /str0ke / define BSDSOURCE include include include include include include include include include include include / Windows Server 2003 and XP SP2 remote DoS exploit Tested under OpenBSD 3.6 at WinXP SP 2 Vuln by Dejan Levaja , http://security.nnov.ru/docs7998.html...

MS Windows XP/2003 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc =================================================== MS Windows XP/2003 Remote Denial of Service Exploit =================================================== / Added Line 1 - BSDSOURCE!!!! /str0ke / define BSDSOURCE include include include include...

CVE-2005-0688

Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service CPU consumption via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability CVE-1999-0016...

Windows Server 2003 and XP SP2 LAND attack vulnerability

Hello, everyone. Windows Server 2003 and XP SP2 with Windows Firewall turned off are vulnerable to LAND attack. LAND attack: Sending TCP packet with SYN flag set, source and destination IP address and source and destination port as of destination machine, results in 15-30 seconds DoS condition...