CVE-2003-0989

tcpdump before 3.8.1 allows remote attackers to cause a denial of service infinite loop via certain ISAKMP packets, a different vulnerability than CVE-2004-0057...

CVE-2003-1029

CVE-2003-1029 affects the tcpdump packet analyzer (versions 3.8.1 and earlier) with a vulnerable L2TP protocol parser. A packet with invalid data sent to UDP port 1701 can trigger an infinite loop and unbounded memory use in l2tp_avp_print, causing a denial of service. Connections in the related ...

CVE-2003-0965

CVE-2003-0965 is a cross-site scripting (XSS) vulnerability in the Mailman admin CGI script before 2.1.4. The issue allows remote attackers to steal session cookies and perform unauthorized activities via the administrative interface. Affected: Mailman (admin CGI). Root cause: XSS in the admin UI...

CVE-2003-0819

CVE-2003-0819 is a buffer-overflow vulnerability in the H.323 filter of Microsoft ISA Server 2000 that could allow remote code execution in the Microsoft Firewall Service via crafted H.323 traffic. OpenVAS entries corroborate a remote-code-execution risk; affected product is ISA Server 2000 (Gold...

CVE-2003-0965

Removed by vendor...

Sun Solaris tcsh(1) contains vulnerability in the built-in ls-F command

Overview Sun Solaris tcsh1 contains a vulnerability in the built-in ls-F command that could allow an unprivileged user to create or remove files or gain privileges of another user. Description A vulnerability in the built-in ls-F command of the Sun Solaris tcsh1 may allow an intruder to create or...

CVE-2003-0949

CVE-2003-0949 affects xsok 1.02, where the process fails to drop privileges before locating/execing the gunzip program. This enables local users to run arbitrary commands with the privileges of the vulnerable process. Public records corroborate an in-OS privilege issue in xsok and in related Debi...

CVE-2003-0823

CVE-2003-0823 describes a drag-and-drop hijack in Internet Explorer 6 SP1 and earlier, where invoking window.moveBy could direct drag-and-drop actions to other windows, enabling remote control of user actions. The vulnerability is cited as a variant exploited by other browsers as well (e.g., CVE-...

CVE-2003-0815

CVE-2003-0815 concerns cross-domain vulnerabilities in Internet Explorer 6 SP1 and earlier. The connected OpenVAS and NVD entries describe three CAN-2003-0814/0815/0816 variants (ExecCommand, Function Pointer Override, Script URL) that could bypass the browser’s cross-domain security model, enabl...

CVE-2003-0814

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand"Refresh" to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability...

CVE-2003-0817

CVE-2003-0817 involves Internet Explorer 5.01–6 SP1 and could allow a remote attacker to bypass zone restrictions and read local/arbitrary files via an XML object or through cross‑domain scripting. The vulnerability stems from how IE binds XML content and handles cross‑domain security, potentiall...

CVE-2003-0949

xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands...

CVE-2003-0368

CVE-2003-0368 affects the Nokia Gateway GPRS Support Node (GGSN, IP650-based). The issue allows a remote attacker to trigger a kernel panic/DoS by sending a malformed IP packet containing a TCP option 0xFF. Impact is a restart of the GGSN and disruption of connectivity. Mitigation provided by Nok...

CVE-2003-0949

xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands...

CVE-2003-0175

CVE-2003-0175 affects SGI IRIX prior to 6.5.21 via the PIOCSWATCH ioctl: a local attacker can crash the kernel (DoS). CERT/CC and NVD confirm this is a local-denial condition caused by invoking PIOCSWATCH in user space. Vendor guidance (SGI advisory 20030603-01-P) recommends upgrading to IRIX 6.5...

CVE-2003-0817

Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object...

CVE-2003-0816

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by 1 using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, 2 using the window.open method to load a file: URL containing Javascript, as demonstrated using...

CVE-2003-0815

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by 1 modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or 2 modifying the createRange method and using the...

CVE-2003-0119

The CVE-2003-0119 issue affects IBM AIX secldapclntd: the daemon on AIX 4.3, 5.1 and 5.2 uses an Internet socket to talk to the LDAP load module, allowing remote attackers to connect to the daemon and perform unauthorized activities. This is a remote-access vulnerability with potential data acces...

CVE-2003-0902

CVE-2003-0902 affects minimalist, a mailing-list manager. Public details in Debian DSA-402 describe a remote code-execution vulnerability caused by unsanitised input in minimalist versions 2.4 and 2.2 (and possibly other builds). Debian advisories state fixed packages: 2.2-4 for woody (stable) an...