CVE-2003-1013

The CVE-2003-1013 issue affects Ethereal/tethereal prior to version 0.10.0, where the Q.931 dissector could be exploited to crash the application via a malformed Q.931 packet, triggering a null dereference and resulting in denial of service. This vulnerability is documented across multiple adviso...

CVE-2003-1013

The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service crash via a malformed Q.931, which triggers a null dereference...

CVE-2003-0996

CVE-2003-0996 concerns an unknown “System Security Vulnerability” in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 that could allow a local attacker to gain privileges via the help interface. The NVD entry assigns a CVSSv2 base score of 4.6 (MEDIUM) with LOCAL attack vector and part...

CVE-2003-0999

CVE-2003-0999 affects Solaris 2.6–9 components: (1) lpstat and (2) the libprint library. The sources describe unknown multiple vulnerabilities that may allow an attacker to execute arbitrary code or read/write arbitrary files. The CVSS indicates local access with low complexity, no authentication...

CVE-2003-1000

Removed by vendor...

CVE-2003-0995

Buffer overflow in the Microsoft Message Queue Manager MSQM allows remote attackers to cause a denial of service RPC service crash via a queue registration request...

CVE-2003-1000

The CVE-2003-1000 vulnerability concerns xchat 2.0.6. It allows remote attackers to crash the client by sending a passive DCC request with an invalid ID, triggering a null dereference. Connected sources confirm the affected software/version and the underlying cause. Mitigation details are limited...

CVE-2003-0997

CVE-2003-0997 refers to an unknown denial-of-service flaw in Computer Associates’ Unicenter Remote Control (URC) 6.0. The vulnerability allows an attacker to trigger CPU consumption in the URC host service, potentially impacting availability. Public detail is limited in the provided documents; a ...

CVE-2003-1003

CVE-2003-1003 affects Cisco PIX firewall versions 5.x and 6.3.1 and earlier. The vulnerability allows remote attackers to cause a denial-of-service crash/reload via an SNMPv3 message when snmp-server is configured. The connected Red Hat/NVD records and Cisco advisory corroborate the DoS impact. T...

CVE-2003-0963

Buffer overflows in 1 trynetscapeproxy and 2 trysquideplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands...

CVE-2003-0089

Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as 1 swinstall and 2 swmodify...

CVE-2003-0914

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL time-to-live value...

CVE-2003-0936

Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe...

CVE-2003-0938

vos24u.c in SAP database server SAP DB 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLAT stored procedure...

CVE-2003-0951

Partition Manager parmgr in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attackers to obtain sensitive data or gain privileges...

CVE-2003-0327

Sybase Adaptive Server Enterprise ASE 12.5 allows remote attackers to cause a denial of service hang via a remote password array with an invalid length, which triggers a heap-based buffer overflow...

CVE-2003-0968

Stack-based buffer overflow in SMBLogonServer of the rlmsmb experimental module for FreeRADIUS 0.9.3 and earlier allows remote attackers to execute arbitrary code via a long User-Password attribute...

Immunity Canvas: FP30REG

Name| fp30reg ---|--- CVE| CVE-2003-0822 Exploit Pack| CANVAS Description| FP30REG Chunked Heap Overflow MS03-051 Notes| CVE Name: CVE-2003-0822 VENDOR: Microsoft MSADV: MS03-051 MSRC: http://www.microsoft.com/technet/security/bulletin/ms03-051.mspx Date public: 10/01/2003 CERT Advisory: CVE Url:...

CVE-2003-0856

...

CVE-2003-0967

raddecode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service crash via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute...