CVE-2003-0945

The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities...

CVE-2003-0946

Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the email address argument of a "MAIL FROM" command...

CVE-2003-0972

Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" semicolon characters in escape sequences, which leads to a buffer overflow...

CVE-2003-0961

...

CVE-2003-0972

...

CVE-2003-0981

FreeScripts VisitorBook LE visitorbook.pl logs the reverse DNS name of a visiting host, which allows remote attackers to spoof the origin of their incoming requests and facilitate cross-site scripting XSS attacks...

CVE-2003-0980

Cross-site scripting XSS vulnerability in FreeScripts VisitorBook LE visitorbook.pl allows remote attackers to inject arbitrary HTML or web script via 1 the "do" parameter, 2 via the "user" parameter from a host with a malicious reverse DNS name, 3 via quote marks or ampersands in other parameter...

CVE-2003-0983

Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, enabling unauthorized activity via (1) a local user account named “bubba,” (2) an open TCP port 34571, or (3) a DHCP server on the manufacturer’s test network when a local DHCP server i...

CVE-2003-1056

The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...

CVE-2003-0980

CVE-2003-0980 is an XSS vulnerability in FreeScripts VisitorBook LE (visitorbook.pl). The issue permits remote attackers to inject arbitrary HTML or JavaScript via (1) the do parameter, (2) the user parameter from a host with a malicious reverse DNS name, and (3) quote marks or ampersands in othe...

CVE-2003-0981

CVE-2003-0981 affects FreeScripts VisitorBook LE (visitorbook.pl). The issue is that the program logs the reverse DNS name of a visiting host, which can enable remote attackers to spoof the origin of requests and facilitate cross-site scripting (XSS). The connected documents do not provide concre...

CVE-2003-0979

Vulnerability overview (CVE-2003-0979) FreeScripts VisitorBook LE (visitorbook.pl) fails to properly escape line breaks in user input. This can allow remote attackers to abuse the script as an open mail relay when $mailuser is 1 (via extra headers in the email field) and to trash the guestbook da...

CVE-2003-0982

CVE-2003-0982 refers to a buffer overflow in Cisco ACNS authentication module. Affected versions are ACNS 4.x before 4.2.11 and 5.x before 5.0.5, where sending an overly long password can allow a remote attacker to execute arbitrary code on the device. The Cisco advisory notes fix upgrades to 4.2...

CVE-2003-0979

FreeScripts VisitorBook LE visitorbook.pl does not properly escape line breaks in input, which allows remote attackers to 1 use VisitorBook as an open mail relay, when $mailuser is 1, via extra headers in the email field, or 2 cause the guestbook database to be deleted via a large number of line...

CVS pserver Crafted Module Request Arbitrary File / Directory Creation

According to its version number, the CVS server running on the remote remote host may allow an attacker to create directories and possibly files at the root of the filesystem where the CVS repository is located. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11947;...

CVE-2003-0977

CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests...

CVE-2003-0977

CVE-2003-0977 affects the CVS server prior to 1.11.10, where malformed module requests could cause the server to create directories and files in the filesystem root. The issue is documented across multiple advisories (e.g., RHSA-2004:004, MDKSA-2003:112-1, DSA 422-1) with a common remediation: up...

CVE-2003-0978

CVE-2003-0978 affects the GnuPG client’s gpgkeys_hkp implementation (experimental HKP interface). The vulnerability is a format string issue that can be triggered during key retrieval, potentially allowing a remote attacker or a malicious keyserver to crash the client and, in some scenarios, exec...

CVE-2003-0327

Sybase Adaptive Server Enterprise ASE 12.5 allows remote attackers to cause a denial of service hang via a remote password array with an invalid length, which triggers a heap-based buffer overflow...

CVE-2003-0976

CVE-2003-0976 concerns the NFS Server (XNFS.NLM) component of Novell NetWare 6.5. The issue arises because exports enforcement can be bypassed when using hostname aliases from sys:\etc\hosts, allowing potentially authorized hosts to mount file systems that XNFS should deny. Affected product: NFS ...