10089 matches found
CVE-2003-0937
SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID PID by obtaining a procfs file descriptor for the file and calling execve on a setuid or setgid program, which leaves the descriptor open to the user...
CVE-2003-0821
CVE-2003-0821 covers a remote-code-execution vulnerability in Microsoft Excel 97, 2000, and 2002 due to a malicious Excel 4/XLM macro that bypasses the macro security model. Affected products could execute arbitrary code when a user opens a specially crafted spreadsheet, with the attacker potenti...
CVE-2003-0822
Affected software : Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002. Vulnerability : a buffer overflow in the debug functionality of fp30reg.dll (MS03-051) that can be triggered via a crafted chunked-encoded request, allowing remote code execution. Impact : remote attacker could execut...
CVE-2003-0947
Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable...
CVE-2003-0629
Cross-site scripting XSS vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScript...
CVE-2003-0856
CVE-2003-0856 affects iproute up to version 2.4.7, where local users could trigger a denial of service by sending spoofed messages through the kernel netlink interface. The issue is a local-privilege-path denial of service caused by unverified netlink messages. Public advisories (Debian DSA-492, ...
CVE-2003-0946
The CVE-2003-0946 entry relates to a format string vulnerability in clamav-milter for Clam AntiVirus 0.60–0.60p and other versions before 0.65. The flaw allows a remote attacker to cause a denial of service and possibly execute arbitrary code via format string specifiers in the email address argu...
CVE-2003-0820
Microsoft Word 97, 98J, 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack...
CVE-2003-0822
Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions FPSE 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request...
CVE-2003-0932
CVE-2003-0932 corresponds to a buffer overflow in omega-rpg 0.90 that allows local users to execute arbitrary code via a long command line or environment variable. The Debian advisory DSA-400-1 notes this requires updating the omega-rpg package to remediate the issue; other sources likewise refer...
CVE-2003-0820
CVE-2003-0820 / CVE-2003-0821 describe buffer overrun and macro security bypass in Microsoft Word and Excel (Word 97–2002, Works Suite 2001–2004). Root cause: improper validation of data lengths in Macro Names (Word) and related macro handling, enabling arbitrary code execution when a user opens ...
CVE-2003-0947
Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable...
CVE-2003-0950
PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random system time name of the directory used to store the file, and directly requesting that file...
CVE-2003-0856
iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as other users to the kernel netlink interface...
CVE-2003-0937
CVE-2003-0937 affects SCO UnixWare 7.1.1, 7.1.3 and Open UNIX 8.0.0. Local users can bypass protections on the process AS (as) by obtaining a procfs descriptor for a PID and then execve() a setuid/setgid binary, leaving the descriptor open to the user (local privilege escalation). According to ad...
CVE-2003-0950
CVE-2003-0950 affects PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x. The issue allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the directory name (based on system time) used to store the file, and directly requesting that file. The underlyi...
CVE-2003-0824
Microsoft FrontPage Server Extensions (FPSE) 2000/2002 and SharePoint Team Services 2002 are affected by two vulnerabilities described in MS03-051. The first is a remote denial-of-service in the remote debugging function of FPSE (buffer overrun in the fp30reg.dll/remote debug path) that could tem...
CVE-2003-0089
Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as 1 swinstall and 2 swmodify...
CVE-2003-0629
CVE-2003-0629 concerns the PeopleSoft IScript environment in PeopleTools 8.43 and earlier. The XSS vulnerability arises from how the IScript interface processes HTTP requests, allowing remote attackers to inject arbitrary web script via a crafted request. Impact can include theft of session data ...