10089 matches found
CVE-2003-0861
Integer overflows in 1 base64encode and 2 the GD library for PHP before 4.3.3 have unknown impact and unknown attack vectors...
CVE-2003-0863
The phpchecksafemodeincludedir function in fopenwrappers.c of PHP 4.3.x returns a success value 0 when the safemodeincludedir variable is not specified in configuration, which differs from the previous failure value and may allow remote attackers to exploit file include vulnerabilities in PHP...
CVE-2003-0846
SuSEconfig.javarunt in the javarunt package on SuSE Linux 7.3Pro allows local users to overwrite arbitrary files via a symlink attack on the .javawrapper temporary file...
CVE-2003-0853
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd...
CVE-2003-0787
The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges...
CVE-2003-0832
Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary files via .. dot dot sequences in a Hostname header...
MS03-044: Buffer Overrun in Windows Help (825119)
A security vulnerability exists in the Windows Help Service that could allow arbitrary code execution on an affected system. An attacker who successfully exploited this vulnerability could run code with Local System privileges on this host. C Tenable Network Security, Inc. include"compat.inc"; if...
CVE-2003-0626
psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the 1 headername or 2 footername arguments...
Insecure handling of procfs descriptors in UnixWare 7.1.1, 7.1.3 and Open UNIX 8.0.0 can lead to local privilege escalation.
----------------------------------------------------------------------- Texonet Security Advisory 20031024 ----------------------------------------------------------------------- Advisory ID : TEXONET-20031024 Authors : Joel Soderberg and Christer Oberg Issue date : Friday, October 24, 2003 Publi...
[RHSA-2003:307-01] Updated zebra packages fix security vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated zebra packages fix security vulnerabilities Advisory ID: RHSA-2003:307-01 Issue date: 2003-11-13 Updated on: 2003-11-13 Product: Red Ha...
CVE-2003-0886
CVE-2003-0886 describes a format-string vulnerability in the hfaxd component of Hylafax (versions 4.1.7 and earlier) that allows remote attackers to execute arbitrary code. The vulnerability is documented across multiple advisories (Debian DSA-401-1, SuSE-SA-2003:045, Mandrake MDKSA-2003:105) and...
CVE-2003-0935
Net-SNMP before 5.0.9 is vulnerable to an exposure issue where a user or community can access MIB data that should be restricted. Affected are Net-SNMP components that serve MIB data; the root cause is improper enforcement of MIB view permissions. Impact is data disclosure of restricted MIB objec...
CVE-2003-0934
Technical details about CVE-2003-0934 are not publicly provided in the connected documents; no affected versions, vectors, or fixes are specified here. Monitor for updates.
CVE-2003-0935
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...
CVE-2003-0934
Symbol Access Portable Data Terminal PDT 8100 does not hide the default WEP keys if they are not changed, which could allow attackers to retrieve the keys and gain access to the wireless network...
MS03-049: Buffer Overflow in the Workstation Service (828749)
The remote version of Windows contains a flaw in the function NetpValidateName in the WorkStation service that could allow an attacker to execute arbitrary code on the remote host with the SYSTEM privileges. A series of worms Welchia, Spybot, ... are known to exploit this vulnerability in the wil...
[bWM#017] Cross-Site-Scripting @ PHPKIT
http://badWebMasters.net ben moeckel security research ------------------------------------------------- badWebMasters security advisory 017 Cross Site Scripting @ PHP-Kit Discovery date: 2003-09 Original advisory: http://badwebmasters.net/advisory/017/ text/html Legal Notice: Copyright 2003 by...
CVE-2003-0913
CVE-2003-0913 relates to an issue in the Mac OS X Terminal application on 10.3 (Client and Server) that could allow a rogue website to access the user’s web cookies. The vulnerability is described as unknown in the original CVE entry, but Nessus and related advisories indicate a fix was released ...
CVE-2003-0927
CVE-2003-0927 refers to a heap-based buffer overflow in Ethereal (Wireshark) up to version 0.9.15, affecting the SOCKS dissector and enabling remote denial of service and possible arbitrary code execution. Connected sources also confirm related CAN entries (CVE-2003-0925/0926) and advisories from...