CVE-2003-0012

CVE-2003-0012 (Bugzilla) is associated with Bugzilla data/mining directory being set to world-writable when the data collection script runs, enabling local modification or deletion of collected data. The vulnerability is documented in Debian DSA-230-1 and Debian/NVD entries, with affected Bugzill...

CVE-2003-0075

CVE-2003-0075 describes a signedness error in the myFseek function of samplein.c in Blade encoder (BladeEnc) 0.94.2 and earlier. The issue allows remote attackers to execute arbitrary code via a negative offset value following a "fmt" wave chunk. Affected component: BladeEnc, version

CVE-2003-0075

Integer signedness error in the myFseek function of samplein.c for Blade encoder BladeEnc 0.94.2 and earlier allows remote attackers to execute arbitrary code via a negative offset value following a "fmt" wave chunk...

CVE-2003-0033

Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets...

CVE-2003-0021

The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence...

CVE-2003-0094

A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /dev/random, which causes mcookie to use an entropy source that is more predictable than expected, which may make it easier for certain types of attacks to succeed...

CVE-2003-0019

umlnet in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode...

CVE-2003-0062

Buffer overflow in Eset Software NOD32 for UNIX before 1.013 allows local users to execute arbitrary code via a long path name...

CVE-2003-0019

The CVE-2003-0019 issue affects the uml_net utility in Red Hat Linux 8.0’s kernel-utils package, shipped with incorrect setuid root permissions. This allows local users to modify network interfaces, including ARP entry manipulation and placing interfaces into promiscuous mode. Root cause: the uml...

CVE-2003-0103

CVE-2003-0103 describes a format-string vulnerability in the Nokia 6210 handset. A crafted Multi-Part vCard containing many format specifiers can cause a remote denial of service (crash, lockup, or restart). The initial sources identify the impacted device and the vulnerability class, but do not ...

CVE-2003-0122

Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name DN during NotesRPC authentication and an outer field length that is less than that of the DN field...

CVE-2003-0015

CVE-2003-0015 describes a double-free in CVS

CVE-2003-0016

CVE-2003-0016 refers to the Apache HTTP Server vulnerability where, on Windows 9x/Me, an HTTP request containing MS-DOS device names could remotely cause a denial of service or enable arbitrary code execution. Public sources in the connected documents consistently describe this as a flaw in filte...

CVE-2003-0077

The hanterm hanterm-xf terminal emulator 2.0.5 and earlier, and possibly later versions, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious...

CVE-2003-0032

Memory leak in libmcrypt before 2.5.5 allows attackers to cause a denial of service memory exhaustion via a large number of requests to the application, which causes libmcrypt to dynamically load algorithms via libtool...

CVE-2003-0070

CVE-2003-0070 affects VTE as used by gnome-terminal; the vte_sequence_handler_window_manipulation routine fails to sanitize certain escape sequences, allowing an attacker to modify the window title and inject it back into the command line, potentially enabling arbitrary command execution. This is...

CVE-2003-0032

CVE-2003-0032 affects libmcrypt prior to 2.5.5. Under load, libmcrypt can leak memory when loading algorithms via libtool, leading to memory exhaustion and potential DoS. The description and connected advisories indicate this is mitigated by upgrading to 2.5.5 or later; Debian DSA-228 and related...

CVE-2003-0007

Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosur...

CVE-2003-0905

Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remote attackers to cause a denial of service disallowing new connections via a certain sequence of TCP/IP packets...

CVE-2003-0087

CVE-2003-0087 describes a buffer overflow in the IBM AIX libIM.a (NLS) library. The vulnerability affects AIX 4.3.x through 5.2 and can allow a local attacker to gain privileges via multiple vectors, including a long -im argument to aixterm. The root cause is a buffer overflow in the libIM librar...