10089 matches found
CVE-2003-0854
ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd...
CVE-2003-0897
"Shatter" vulnerability in CommCtl32.dll in Windows XP may allow local users to execute arbitrary code by sending 1 BCMGETTEXTMARGIN or 2 BCMSETTEXTMARGIN button control messages to privileged applications...
CVE-2003-0874
CVE-2003-0874 affects DeskPRO 1.1.0 and earlier. The vulnerability arises from multiple SQL injection vectors, including cat and article parameters in faq.php, tickedid in view.php, and the Password field on the logon screen. The underlying issue is improper input handling that allows an attacker...
CVE-2003-0896
The CVE-2003-0896 entry concerns the loadClass method of sun.applet.AppletClassLoader in the JVM used with Sun SDK/JRE 1.4.1_03 and earlier. A remote attacker can bypass sandbox restrictions and execute arbitrary code by loading a class name that uses "/" instead of "." (dot), which avoids the Se...
CVE-2003-0852
Format string vulnerability in sendmessage.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP servers to cause a denial of service crash in sylpheed via format strings in an error message...
CVE-2003-1181
Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request to info.php, which invokes the phpinfo function...
OpenServer 5.0.5 : Insecure creation of files in /tmp
To: [email protected] [email protected] [email protected] etsys.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: OpenServer 5.0.5 : Insecure creation of files in /tmp Advisory number: CSSA-2003-SCO.27 Issue date: 2003 October 20 Cross...
CVE-2003-0793
The CVE-2003-0793 issue affects GDM 2.4.4.x before 2.4.4.4 and 2.4.1.x before 2.4.1.7, where input size is not restricted, allowing a local attacker to cause a denial of service via memory consumption. Publicly cited references (Slackware/Mandrake/MDV) confirm local user impact (crash/freeze) and...
CVE-2003-0794
The CVE-2003-0794 issue affects GDM (GNOME Display Manager) with versions 2.4.4.x before 2.4.4.4 and 2.4.1.x before 2.4.1.7. The root cause is that GDM does not limit the number or duration of commands and uses a blocking socket, enabling a local attacker to trigger denial of service via resource...
CVE-2003-0870
Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name...
CVE-2003-0708
Format string vulnerability in LinuxNode node before 0.3.2 may allow attackers to cause a denial of service or execute arbitrary code...
CVE-2003-0725
Buffer overflow in the RTSP protocol parser for the View Source plug-in vsrcplin.so or vsrcplin3260.dll for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code...
CVE-2003-0733
Multiple cross-site scripting XSS vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary web script and steal authentication credentials via 1 a forward instruction to the Servlet container...
CVE-2003-0739
VMware Workstation 4.0.1 for Linux, build 5289 and earlier, allows local users to delete arbitrary files via a symlink attack...
CVE-2003-0749
Cross-site scripting XSS vulnerability in wgate.dll for SAP Internet Transaction Server ITS 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal cookies via the service parameter...
CVE-2003-0726
RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is executed in the security context of the previously loaded URL, as demonstrated using a "javascript:" URL in the area tag...
CVE-2003-0731
CiscoWorks Common Management Foundation CMF 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter...
CVE-2003-0753
nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphpconfigLangFile parameter...
CVE-2003-0630
Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator atari800 before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrated with the -osarom argument...