10089 matches found
CVE-2003-0592
Konqueror in KDE 3.1.3 and earlier kdelibs allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" encoded dot dot directory traversal sequences in a URL, which causes Konqueror to send the cookie outside the specified URL subsets, e.g. to a...
CVE-2003-1010
CVE-2003-1010 affects Mac OS X (10.2.8 and 10.3.2) and Mac OS X Server (10.2.8 and 10.3.2) due to an unknown vulnerability in fs_usage that allows local users to gain privileges. The root cause and attack vectors are not detailed in the provided documents. Impact is described as partial confident...
CVE-2003-1009
Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remote attackers to gain privileges...
CVE-2003-0828
CVE-2003-0828 describes a buffer overflow in the Debian freesweep utility (Debian GNU/Linux 3.0) that could let a local user gain privileges in the games group by processing environment variables. The vulnerability is caused by an overflow in freesweep and is documented in Debian security advisor...
CVE-2003-1006
The CVE-2003-1006 entry concerns a buffer overflow in Apple Mac OS X’s cd9660.util across Mac OS X 10.0–10.3.2 (and Server 10.0–10.3.2), exploitable by a local attacker via a long command-line parameter. Successful exploitation could allow arbitrary code execution with root privileges. The vulner...
CVE-2003-1018
Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors...
CVE-2003-0612
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin...
CVE-2003-0828
Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain "games" group privileges when processing environment variables...
CVE-2003-1007
The CVE-2003-1007 entry concerns Apple File Server (AFS) in Apple Mac OS X 10.2.8 and 10.3.2, which may not properly handle certain malformed requests. The available documents identify the affected component (AFS) and the affected OS versions, with the impact described as unknown in the original ...
CVE-2003-1006
Buffer overflow in cd9660.util in Apple Mac OS X 10.0 through 10.3.2 and Apple Mac OS X Server 10.0 through 10.3.2 may allow local users to execute arbitrary code via a long command line parameter...
CVE-2003-0828
Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain "games" group privileges when processing environment variables...
CVE-2003-0796
The connected SGI advisory (SECURITYVULNS/DOC:5438) confirms a vulnerability in rpc.mountd on SGI IRIX 6.5.18–6.5.22 that permits mount requests from unprivileged ports even when -n is not allowed, potentially enabling unauthorized NFS mounting. The issue is associated with CAN-2003-0796; SGI’s r...
CVE-2003-0607
CVE-2003-0607 affects the xconq package (version 7.4.1) via a local buffer overflow in the USER and DISPLAY environment variable handling, enabling a local attacker to gain the gid 'games'. Connected sources confirm the issue in Debian advisory DSA-354 for xconq and note that a fix was released (...
CVE-2003-0444
CVE-2003-0444 corresponds to a heap-based buffer overflow in gtksee, affecting GTKSee 0.5 and 0.5.1. The vulnerability is triggered when loading PNG images of certain color depths, allowing remote code execution. Debian’s security advisory DSA-337-1 fixes this in gtksee by upgrading to a correcte...
CVE-2003-1010
Unknown vulnerability in fsusage in Mac OS X 10.2.8 and 10.3.2 and Mac OS X Server 10.2.8 and 10.3.2 allows local users to gain privileges via unknown attack vectors...
CVE-2003-1009
CVE-2003-1009 concerns Apple macOS Directory Services. Affected products include Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2. The underlying issue is that Directory Services may accept authentication server information from unknown LDAP or NetInfo s...
CVE-2003-0601
CVE-2003-0601 : The vulnerability affects Workgroup Manager in Apple Mac OS X Server 10.2–10.2.6, where a new account’s password is not properly disabled before the account is saved, allowing remote attackers to gain unauthorized access via the new account before it is saved. The available source...
CVE-2003-0607
Buffer overflow in xconq 7.4.1 allows local users to become part of the "games" group via the 1 USER or 2 DISPLAY environment variables...
CVE-2003-1011
Apple Mac OS X 10.0 through 10.2.8 allows local users with a USB keyboard to gain unauthorized access by holding down the CTRL and C keys when the system is booting, which crashes the init process and leaves the user in a root shell...