CVE-2003-1544

Unrestricted critical resource lock in Terminal Services for Windows 2000 before SP4 and Windows XP allows remote authenticated users to cause a denial of service reboot by obtaining a read lock on msgina.dll, which prevents msgina.dll from being loaded...

CVE-2003-1164

Cross-site scripting XSS vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HTML via the URI, which is injected into the HTML error page...

CVE-2003-0698

...

CVE-2003-1503

Buffer overflow in AOL Instant Messenger AIM 5.2.3292 allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name...

Immunity Canvas: ABYSS

Name| abyss ---|--- CVE| CVE-2003-1337 Exploit Pack| CANVAS Description| abyss Notes| References: http://archives.neohapsis.com/archives/bugtraq/2003-06/0235.html CVE Name: CVE-2003-1337 VENDOR: Aprelium Notes: None Date public: 06/29/03 CERT Advisory: None CVE Url:...

CVE-2003-0698

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2003-0743. Reason: This candidate is a duplicate of CVE-2003-0743. Notes: All CVE users should reference CVE-2003-0743 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Immunity Canvas: EZNET

Name| eznet ---|--- CVE| CVE-2003-1339 Exploit Pack| CANVAS Description| eznet Notes| References: 'http://www.ezmeeting.com/Products.html', 'http://www.elitehaven.net/ezstackoverflow.txt' CVE Name: CVE-2003-1339 VENDOR: EZMeeting Date public: 12/07/2003 CERT Advisory: CVE Url:...

CVE-2003-1557

Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode "-B", allows remote attackers to execute arbitrary code via email containing headers with leading "." characters...

CVE-2003-1543

Cross-site scripting XSS vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message...

CVE-2003-1121

Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, which allows remote attackers to 1 modify arbitrary registry entries via the ScriptLogic RPC service SLRPC or 2 modify arbitrary configuration via the RunAdmin services...

CVE-2003-0900

Perl 5.8.1 on Fedora Core does not properly initialize the random number generator when forking, which makes it easier for attackers to predict random numbers...

CVE-2003-1327

...

CVE-2003-1122

ScriptLogic 4.01, and possibly other versions before 4.14, uses insecure permissions for the LOGS$ share, which allows users to modify log records and possibly execute arbitrary code...

CVE-2003-1407

Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command...

CVE-2003-1453

Cross-site scripting XSS vulnerability in the MytextSanitizer function in XOOPS 1.3.5 through 1.3.9 and XOOPS 2.0 through 2.0.1 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in an IMG tag...

CVE-2003-1493

Memory leak in HP OpenView Network Node Manager NNM 6.2 and 6.4 allows remote attackers to cause a denial of service memory exhaustion via crafted TCP packets...

CVE-2003-1549

Cross-site scripting XSS vulnerability in header.php in MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the makw parameter...

CVE-2003-1553

Haakon Nilsen Simple Internet Publishing System SIPS 0.2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password and other user information via a direct request to a user-specific configuration directory...

CVE-2003-1563

Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters OPS/RAC allows local users to cause a denial of service cluster node panic or abort by launching a daemon listening on a TCP port that would otherwise be used by the Distributed Lock Manager DLM, possibly involving...

CVE-2003-1309

The DeviceIoControl function in the TrueVector Device Driver VSDATANT in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain privileges via certain signals aka "Device Driver Attack"...