CVE-2003-0901

The CVE-2003-0901 issue affects PostgreSQL 7.2.x and 7.3.x up to 7.3.3 (before 7.3.4) with a buffer overflow in the to_ascii conversion function, allowing remote code execution. Debian, Red Hat, Mandrake/Mandriva and other advisories describe the vulnerability and the need to upgrade to patched p...

CVE-2003-0882

Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID field in a TCP packet...

CVE-2003-0881

Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by sniffing the password...

CVE-2003-0683

NFS in SGI 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an /etc/exports entry uses wildcards without any hostnames or groups, which could allow attackers to bypass intended restrictions...

CVE-2003-0855

Pan 0.13.3 and earlier allows remote attackers to cause a denial of service crash via a news post with a long author email address...

CVE-2003-0789

modcgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI redirect paths, which could cause Apache to send the output of a CGI program to the wrong client...

CVE-2003-0899

CVE-2003-0899 describes a buffer overflow in thttpd (defang in libhttpd.c) affecting versions 2.21 to 2.23b1. The overflow can be triggered by requests containing ‘’ that are expanded to “”, enabling remote code execution. Connected sources (SUSE, Debian, OpenVAS, and NVD listing) confirm the vul...

CVE-2003-0901

Buffer overflow in toascii for PostgreSQL 7.2.x, and 7.3.x before 7.3.4, allows remote attackers to execute arbitrary code...

CVE-2003-0880

CVE-2003-0880 involves a vulnerability in Mac OS X prior to 10.3 where local users could access Dock functions from behind Screen Effects when Full Keyboard Access is enabled via the Keyboard pane in System Preferences. The description labels the vulnerability as Unknown, with no publicly provide...

CVE-2003-0881

The vulnerability (CVE-2003-0881) affects Mac OS X prior to 10.3 when configured for MD5 Challenge Response. If the CRAM-MD5 hashed login fails, the system uses plaintext authentication, potentially allowing remote attackers to sniff the password and gain privileges. The connected documents provi...

CVE-2003-0877

Mac OS X before 10.3 with core files enabled allows local users to overwrite arbitrary files and read core files via a symlink attack on core files that are created with predictable names in the /cores directory...

CVE-2003-1143

Croteam Serious Sam demo test 2 2.1a, Serious Sam: the First Encounter 1.05, and Serious Sam: the Second Encounter 1.05 allow remote attackers to cause a denial of service crash or freeze via a TCP packet with an invalid first parameter...

CVE-2003-0871

CVE-2003-0871 concerns QuickTime Java in Mac OS X v10.3 and Mac OS X Server 10.3. The description indicates an unknown vulnerability that could allow an attacker to gain unauthorized access to a system. Connected documents do not provide details beyond this, including verified affected components...

CVE-2003-0876

Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories when they are dragged copied from a mounted volume such as a disk image DMG, which could cause the directories to have less restrictive permissions than intended...

CVE-2003-0855

Pan (GNOME/GTK+ newsreader) 0.13.3 and earlier is affected by CVE-2003-0855: parsing an article header with a very long author email can cause a remote denial of service (crash). The issue is addressed in Pan 0.13.4 and later; advisories (e.g., RHSA-2003:312) recommend upgrading to patched packag...

CVE-2003-0883

The System Preferences capability in Mac OS X before 10.3 allows local users to access secure Preference Panes for a short period after an administrator has authenticated to the system...

CVE-2003-0878

slpd daemon in Mac OS X before 10.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2003-0875...

CVE-2003-0877

Mac OS X prior to 10.3 with core files enabled is vulnerable to a local symlink attack in /cores that can cause arbitrary file overwrite and core file disclosure. The core files are created with predictable names (core.PID), owned by root and 0400 by default, and the /cores directory is world-wri...

CVE-2003-0542

The CVE-2003-0542 entry applies to Apache before 1.3.29, where multiple stack-based buffer overflows affect mod_alias and mod_rewrite. The root cause is a vulnerability in a regular expression with more than 9 captures, allowing an attacker to crash the server or execute arbitrary code via crafte...

CVE-2003-0542

Multiple stack-based buffer overflows in 1 modalias and 2 modrewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service crash or execute arbitrary code via a regular expression with more than 9 captures...