CVE-2003-1186

Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to execute arbitrary code via a long HTTP Referer header...

CVE-2003-1151

Cross-site scripting XSS vulnerability in Fastream NETFile Server 6.0.3.588 allows remote attackers to inject arbitrary web script or HTML via the URL, which is displayed on a "404 Not Found" error page...

CVE-2003-0879

CVE-2003-0879 is a reservation duplicate of CVE-2003-0518 (not the active entry). The connected document CVE-2003-0518 describes a MacOS X screen saver vulnerability: when a user with physical access supplies a very long password, the screen saver can crash and potentially allow access to the und...

CVE-2003-0898

Affected software: IBM DB2 7.2 prior to FixPak 10a, and older versions including 7.1. Vulnerability: local users can overwrite arbitrary files and escalate privileges via a symlink attack on the db2job and db2job2 utilities. Root cause: insufficient access control around symbolic links leading to...

Libnids <= 1.17 buffer overflow

Hello, Libnids is a library which implements the functionality of NIDS E-component. Libnids provides IP defragmentation, TCP stream reassembly and port scan detection. Robert Watson [email protected] has found a bug in the part of libnids code responsible for TCP reassembly. The flaw probably...

CVE-2003-1139

Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file...

CVE-2003-1150

Buffer overflow in the portmapper service PMAP.NLM in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors...

CVE-2003-1137

Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that contains an asterisk wildcard character...

CVE-2003-1138

The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash //...

CVE-2003-1149

Cross-site scripting XSS vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked site, which is displayed on the blocked sites error page...

CVE-2003-0850

CVE-2003-0850 affects libnids prior to 1.18, where the TCP reassembly code can be triggered by overlarge TCP packets, leading to memory corruption and potential remote code execution. Public advisories note a remote vulnerability in libnids and recommend upgrading to libnids 1.18 or newer (e.g., ...

CVE-2003-0896

The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine JVM in Sun SDK and JRE 1.4.103 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" slash instead of "." dot characters,...

CVE-2003-0854

CVE-2003-0854 describes a memory exhaustion vulnerability in ls (fileutils/coreutils) where a large -w value causes excessive memory consumption. It can be triggered via applications that invoke ls, notably wu-ftpd, leading to denial of service. The issue is associated with wu-ftpd and has Debian...

CVE-2003-0872

The CVE-2003-0872 issue affects OpenServer prior to version 5.0.6. The vulnerability arises from insecure handling of temporary files in several OpenServer scripts, enabling local users to overwrite files via a symlink attack on /tmp and perform other unauthorized activities. According to the CVE...

CVE-2003-0850

The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets."...

CVE-2003-0790

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2003-0853

CVE-2003-0853 refers to an integer overflow in the ls utility within the fileutils/coreutils packages. The flaw can allow local users to cause a denial of service or potentially execute arbitrary code when applications pass large -w arguments to ls (notably via services such as wu-ftpd). Document...

CVE-2003-0894

CVE-2003-0894 affects Oracle 9i Database (9.0.x and 9.2.x up to 9.2.0.4). A buffer overflow in the oracle and oracleO command-line programs can allow a local user to execute arbitrary code with the oracle user’s privileges via a long argv[1]. Public exploit scripts were noted by CERT/CC. Oracle r...

CVE-2003-0854

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd...

CVE-2003-0875

OpenSLP before 1.0.11 contains a symbolic link vulnerability in the slpd.all_init script that allows local users to overwrite arbitrary files via the route.check temporary file. This CVE (CVE-2003-0875) is documented in NVD and related sources; no exploitation details or patches are provided in t...