Microsoft Windows Help And Support Center URI Validation Code Execution Vulnerability

Description Microsoft has reported a vulnerability in the Help and Support Center that is related to how HCP URIs are validated. This issue could reportedly be exploited via a malicious web page or HTML e-mail to execute arbitrary code on a client system. The issue may permit an attacker to injec...

Microsoft Negotiate SSP Remote Buffer Overflow Vulnerability

Description The Microsoft Negotiate Security Software Provider SSP interface is prone to a remote buffer overflow vulnerability. In most cases, exploitation would result in a denial of service, but arbitrary code execution is possible. Technologies Affected Avaya DefinityOne Media Servers Avaya...

CVE-2003-0648

CVE-2003-0648 concerns multiple buffer overflow vulnerabilities in vfte (a fork/variant of FTE) prior to version 0.50, enabling a local user to execute arbitrary code with the privileges of the FTE process. The Debian advisory and CERT entries describe issues in both environment variable handling...

CVE-2003-0993

...

CVE-2003-0607

...

CVE-2003-1011

Apple Mac OS X 10.0 through 10.2.8 allows local users with a USB keyboard to gain unauthorized access by holding down the CTRL and C keys when the system is booting, which crashes the init process and leaves the user in a root shell...

CVE-2003-0444

Heap-based buffer overflow in GTKSee 0.5 and 0.5.1 allows remote attackers to execute arbitrary code via a PNG image of certain color depths...

CVE-2003-0607

Buffer overflow in xconq 7.4.1 allows local users to become part of the "games" group via the 1 USER or 2 DISPLAY environment variables...

CVE-2003-0828

Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain "games" group privileges when processing environment variables...

CVE-2003-1010

Unknown vulnerability in fsusage in Mac OS X 10.2.8 and 10.3.2 and Mac OS X Server 10.2.8 and 10.3.2 allows local users to gain privileges via unknown attack vectors...

CVE-2003-0828

...

CVE-2003-1009

Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remote attackers to gain privileges...

CVE-2003-1018

Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors...

CVE-2003-0601

Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved...

CVE-2003-0993

modaccess in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions...

CVE-2003-0797

Unknown vulnerability in rpc.mountd in SGI IRIX 6.5 through 6.5.22 allows remote attackers to cause a denial of service process death via unknown attack vectors...

CVE-2003-0612

...

CVE-2003-0782

CVE-2003-0782 affects ecartis; multiple buffer overflows present before version 1.0.0 allow denial of service and possible remote code execution. Connected sources (Debian CAN-2003-0782/DSA-467-1, FreeBSD/OpenVAS entries) reiterate buffer overflows and input-validation bugs in ecartis, with remed...

Vulnerabilities in Member Management System 2.1

Title: Vulnerabilities in Member Management System 2.1 Software: Member Management System 2.1 Vendor: http://www.expinion.net/software/appmms.asp Impact: Disclosure of authentication information, Disclosure of user information, Execution of arbitrary code via network, Modification of user and adm...

CVE-2003-1040

CVE-2003-1040 concerns kmod in the Linux kernel failing to set its uid, suid, gid, and sgid to 0. This can enable a local attacker to cause a denial-of-service condition (kernel crash) by sending certain signals to kmod. The associated public material confirms the issue in the kernel around 2.4.x...