CVE-2003-0927

Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the SOCKS dissector...

CVE-2003-0926

CVE-2003-0926 affects Ethereal (and Tethereal) up to version 0.9.15, enabling remote attackers to crash the service via certain malformed ISAKMP or MEGACO packets. Some connected advisories (Mandrake MDKSA-2003:114 and RHSA-2003:324) indicate that Ethereal 0.9.16 (or newer) fixes this issue; upgr...

CVE-2003-0851

CVE-2003-0851 describes a DoS in OpenSSL’s ASN.1 parser caused by large recursion in malformed ASN.1 sequences. Public diagnostics in the connected data tie the issue to OpenSSL 0.9.6k and older, with Red Hat/Fedora advisories noting fixes in later OpenSSL releases (e.g., 0.9.6l or newer). The vu...

CVE-2003-0565

CVE-2003-0565 describes multiple vulnerabilities in various vendors’ X.400 protocol implementations. A crafted X.400 message with unexpected ASN.1 constructs may cause a denial of service and potentially allow remote code execution. The issues were highlighted by NISCC/NISCC test suites and span ...

CVE-2003-0622

CVE-2003-0622 affects BEA Tuxedo Admin Console (versions 8.1 and earlier). The vulnerability allows remote attackers to cause a denial of service (hang) by sending pathname arguments containing MS-DOS device names (e.g., CON, AUX). The provided documents confirm the affected product/version and t...

CVE-2003-0624

Cross-site scripting XSS vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier allows remote attackers to inject malicious web script via the person parameter...

CVE-2003-0621

The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument...

CVE-2003-0624

CVE-2003-0624 is an XSS vulnerability in BEA WebLogic’s InteractiveQuery.jsp (BEA WebLogic 8.1 and earlier). The flaw allows remote attackers to inject script via the person parameter. Public references (NVD, CVE listing, Full-Disclosure/Corsaire advisory) discuss the issue; a proof-of-concept UR...

CVE-2003-0623

CVE-2003-0623 describes a cross-site scripting (XSS) vulnerability in the BEA Tuxedo Administration Console (versions 8.1 and earlier). The flaw allows remote attackers to inject arbitrary web script via the INIFILE parameter. The connected documents confirm the affected component and the exploit...

CVE-2003-0621

CVE-2003-0621 affects the BEA Tuxedo Administration Console (8.1 and earlier). The vulnerability arises from the INIFILE argument, where modified paths can cause directory traversal to reveal files outside the web root. Impact is information disclosure; the description does not confirm exploit de...

CVE-2003-0622

The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service hang via pathname arguments that contain MS-DOS device names such as CON and AUX...

Immunity Canvas: NIPRINT

Name| niprint ---|--- CVE| CVE-2003-1141 Exploit Pack| CANVAS Description| NIPrint 4.x remote exploit Notes| CVE Name: CVE-2003-1141 VENDOR: networkinstruments.com Repeatability: You get one shot References: http://www.networkinstruments.com/html/niprint.html CVE Url:...

CVE-2003-1144

Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name...

CVE-2003-1141

Buffer overflow in NIPrint 4.10 allows remote attackers to execute arbitrary code via a long string to TCP port 515...

Vulnerability in OpenSSL CVE-2003-0851

A flaw in OpenSSL 0.9.6k only would cause certain ASN.1 sequences to trigger a large recursion. On platforms such as Windows this large recursion cannot be handled correctly and so the bug causes OpenSSL to crash. A remote attacker could exploit this flaw if they can send arbitrary ASN.1 sequence...

PostgreSQL to_ascii() Function Remote Overflows

According to its version number, the PostgreSQL server listening on this port is vulnerable to two buffer overflows in the toascii function that could allow an attacker who can query the remote database to execute arbitrary code, subject to the privileges under which the service operates...

CVE-2003-1142

Help in NIPrint LPD-LPR Print Server 4.10 and earlier executes Windows Explorer with SYSTEM privileges, which allows local users to gain privileges...

CVE-2003-0899

Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to execute arbitrary code via requests that contain '' characters, which trigger the overflow when the characters are expanded to "" and "" sequences...

Immunity Canvas: IAWEBMAIL

Name| IAWebMail ---|--- CVE| CVE-2003-1192 Exploit Pack| CANVAS Description| IAWebMail Notes| CVE Name: CVE-2003-1192 VENDOR: True North Software Notes: Stack overflow in IAWebMail 3.X. Will crash service on failure. Repeatability: One Shot Date public: 09/03/2003 CVE Url:...

CVE-2003-0542

Multiple stack-based buffer overflows in 1 modalias and 2 modrewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service crash or execute arbitrary code via a regular expression with more than 9 captures...