CVE-2003-0120

adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a predictable name...

CVE-2003-0059

Unknown vulnerability in the chktrans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate users in other realms that have the same inter-realm keys...

CVE-2003-0032

Memory leak in libmcrypt before 2.5.5 allows attackers to cause a denial of service memory exhaustion via a large number of requests to the application, which causes libmcrypt to dynamically load algorithms via libtool...

CVE-2003-0107

Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code...

CVE-2003-0066

Removed by vendor...

CVE-2003-0073

Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service crash via mysqlchangeuser...

CVE-2003-0100

Cisco IOS OSPF Neighbor Announcement Overflow (CVE-2003-0100) affects IOS v11.1 through v12.0. A vulnerability in handling a large number of OSPF neighbors can cause a buffer overflow, leading to denial of service and potentially remote code execution. The issue arises when more than 255 neighbor...

CVE-2003-0905

CVE-2003-0905 describes a remote denial-of-service vulnerability in Windows Media Services 4.1 on Windows 2000 Server, affecting the Windows Media Station Service and Windows Media Monitor Service. A remote, unauthenticated attacker can send a specially crafted sequence of TCP/IP packets to the s...

CVE-2003-0003

CVE-2003-0003 describes a locally/remotely exploitable buffer overflow in the Microsoft Locator service (RPC Locator) that allows arbitrary code execution when processing overly large RPC requests. Affected products include Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and...

CVE-2003-0991

CVE-2003-0991 concerns the Mailman mail command handler. Multiple connected sources confirm this is a vulnerability in Mailman prior to 2.0.14 where certain malformed email commands could crash the mailman process, producing a denial-of-service condition. Debian advisories (DSA-436-1/DSA-436-2) a...

CVE-2003-0966

CVE-2003-0966 affects the Elm mail user agent’s frm command. A buffer overflow in the frm command allows a remote attacker to cause arbitrary code execution by sending a message with an excessively long Subject line, affecting Elm versions 2.5.6 and earlier (potentially later). The issue is docum...

CVE-2003-0108

CVE-2003-0108 affects tcpdump versions 3.6 to 3.7.1, where the ISAKMP parser can be triggered by a malformed ISAKMP packet to UDP port 500, causing tcpdump to enter an infinite loop and race CPU resources. The vulnerability is documented across multiple advisories (e.g., Red Hat, Debian, SUSE, Ma...

CVE-2003-0054

Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to the rtsp DESCRIBE method, which is inserted into a log file and executed when the log is viewed usin...

CVE-2003-0055

Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via a long filename...

CVE-2003-0039

The CVE-2003-0039 entry concerns ISC dhcrelay (dhcp-relay) up to version 3.0rc9 (and potentially other builds). A malicious BOOTP packet forwarded to the broadcast MAC ff:ff:ff:ff:ff:ff can cause an infinite loop in the relay, not bounded by hop count, leading to a denial of service against confi...

CVE-2003-0123

CVE-2003-0123 concerns a buffer overflow in Lotus Notes/Domino Web Retriever (R4.5–R6). A remote attacker sending an overly long HTTP status line can crash the Web Retriever, causing a denial of service on the server or client depending on the setup. Public sources from Rapid7 (R7-0011) detail af...

CVE-2003-0079

The CVE-2003-0079 entry concerns hanterm-xf (DEC UDK processing) in the HANTERM terminal emulator prior to version 2.0.5. Multiple connected sources confirm a denial-of-service condition caused by malformed DEC UDK escape sequences that can drive the HANTERM process into a tight loop, consuming C...

CVE-2003-0122

CVE-2003-0122 is a buffer overflow in Lotus Notes/ Domino NotesRPC authentication affecting Notes servers: R4, R5 up to 5.0.11, and early R6. The flaw allows an unauthenticated attacker to trigger a heap overwrite by sending a crafted DN with an outer field length smaller than the DN length, enab...

CVE-2003-0027

The CVE-2003-0027 vulnerability affects Sun KCMS kcms_server on Solaris. The KCS_OPEN_PROFILE call does not properly validate the fileName, allowing a remote attacker to perform directory traversal and read arbitrary files. The ToolTalk database server (rpc.ttdbserverd) TT_ISBUILD() procedure can...

CVE-2003-0988

CVE-2003-0988 affects KDE kdepim up to KDE 3.1.4; the buffer overflow is in the VCF file information reader, allowing arbitrary code execution via a crafted VCF file. Affected versions: KDE 3.1.0–3.1.4. The provided documents do not specify a fixed version or remediation details.