10089 matches found
Microsoft Windows XP2003 - Samba Share Resource Exhaustion (Denial of Service)
Microsoft Windows XP2003 - Samba Share Resource Exhaustion Denial of Service !/bin/sh winblast v3 - DoS on WinXP, Win2003Srv 2003-12-04 Steve Ladjabi I've encountered a strange problem mounting a Windows server share. My setup: Debian Linux, smbmount 3.0.0beta2 and Windows 2003 Server. When the...
Microsoft Windows XP/2003 - Samba Share Resource Exhaustion (Denial of Service)
!/bin/sh winblast v3 - DoS on WinXP, Win2003Srv 2003-12-04 Steve Ladjabi I've encountered a strange problem mounting a Windows server share. My setup: Debian Linux, smbmount 3.0.0beta2 and Windows 2003 Server. When the client creates and deletes a lot of files on the server, the server suddenly...
CVE-2003-0700
The CVE-2003-0700 issue affects the C-Media PCI sound driver in Linux kernels older than 2.4.22. In certain conditions, the driver does not use the get_user function to access userspace, crossing security boundaries and potentially enabling exploitation of vulnerabilities (a different issue from ...
CVE-2003-0700
The C-Media PCI sound driver in Linux before 2.4.22 does not use the getuser function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0699...
CVE-2003-0904
Microsoft Exchange 2003 and Outlook Web Access OWA, when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Servic...
CVE-2003-1022
Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory...
CVE-2003-1025
Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerabilit...
CVE-2003-0990
The parseAddress code in 1 SquirrelMail 1.4.0 and 2 GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the "To:" field...
CVE-2003-1026
Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back back function is called, as demonstrated by BackToFramedJpu, aka th...
CVE-2003-0985
The mremap system call domremap in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area VMA to create...
CVE-2003-1023
Stack-based buffer overflow in vfssresolvesymlink of vfs/direntry.c for Midnight Commander mc 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion...
CVE-2003-1023
Stack-based buffer overflow in vfssresolvesymlink of vfs/direntry.c for Midnight Commander mc 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion...
CVE-2003-0969
...
CVE-2003-1030
DameWare Mini Remote Control is affected by a pre-authentication buffer overflow in the service listening on TCP 6129, allowing remote code execution. The issue affects versions before 3.73; remediation is to upgrade to 3.73.0.0 or later. The connected Nessus data confirms remote exploitation via...
CVE-2003-0992
CVE-2003-0992 is a documented cross-site scripting vulnerability in Mailman’s create CGI script, exploitable to steal cookies of other users. Affected versions are Mailman 2.1.x before 2.1.3; the issue is fixed in later releases (e.g., patches included in 2.1.3 and newer). The linked OpenVAS/Ness...
CVE-2003-0819
Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol...
CVE-2003-1030
Buffer overflow in DameWare Mini Remote Control before 3.73 allows remote attackers to execute arbitrary code via a long pre-authentication request to TCP port 6129...
CVE-2003-0989
CVE-2003-0989 affects tcpdump prior to 3.8.1, allowing remote attackers to cause a denial of service via certain ISAKMP packets (infinite loop). The issue is cited alongside related CANs (2003-1029, 2004-0057) in Debian/OpenVAS advisories and multiple vendor notes, indicating a class of ISAKMP pa...