CVE-2003-0736

Multiple cross-site scripting XSS vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script via 1 the day parameter in the calendar module, 2 the fatcatid parameter in the fatcat module, 3 the PAGEid parameter in the pagemaster module, 4 the PDAlimit...

CVE-2003-0743

Heap-based buffer overflow in smtpin.c for Exim 3 exim3 before 3.36 and Exim 4 exim4 before 4.21 may allow remote attackers to execute arbitrary code via an invalid 1 HELO or 2 EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed...

CVE-2003-0748

Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server ITS 4620.2.0.323011 allows remote attackers to read arbitrary files via ..\ dot-dot backslash sequences in the theme parameter and a template parameter with a filename followed by space characters, which can preven...

CVE-2003-0750

secure.php in PY-Membres 4.2 and earlier allows remote attackers to bypass authentication by setting the adminpy parameter...

CVE-2003-0752

SQL injection vulnerability in global.php3 of AttilaPHP 3.0, and possibly earlier versions, allows remote attackers to bypass authentication via a modified cookid parameter...

CVE-2003-0754

nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphpusers array, which is used for authentication...

CVE-2003-0658

Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files via a certain URL, possibly related to rewrite rules...

CVE-2003-0686

Buffer overflow in PAM SMB module pamsmb 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code...

CVE-2003-0744

The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service process hang and termination via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input...

CVE-2003-0630

Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator atari800 before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrated with the -osarom argument...

CVE-2003-0689

The getgrouplist function in GNU libc glibc 2.2.4 and earlier allows attackers to cause a denial of service segmentation fault and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow...

Opera < 7.21 HREF Escaped Character Overflow

The installed version of Opera on the remote host is vulnerable to a buffer overflow in the code that parses HREF tags in the server. To exploit them, an attacker would need to set up a rogue website, then lure a user of this host to visit the site using Opera. The attacker would then be able to...

CVE-2003-0867

Note: CVE-2003-0867 is a duplicate of CVE-2003-0662 and is not the active entry. The concrete details are in CVE-2003-0662: Buffer overflow in the Troubleshooter ActiveX Control (Tshoot.ocx) in Windows 2000 SP4 and earlier allows remote code execution via a crafted HTML document invoking RunQuery...

CVE-2003-0714

The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service memory exhaustion by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000...

CVE-2003-0712

The CVE-2003-0712 issue is an XSS vulnerability in Microsoft Exchange Server 5.5 Outlook Web Access (OWA). The root cause is improper HTML encoding in the Compose New Message form, which could allow an attacker to craft a link or email that, when clicked by a user, executes script in the user’s b...

CVE-2003-0865

CVE-2003-0865 describes a heap-based buffer overflow in mpg123’s readstring() within httpget.c that could allow remote code execution via a crafted HTTP response. The issue affected mpg123 0.59r and 0.59s and has been fixed in later releases across distributions (e.g., Debian DSA-435-1 for mpg123...

CVE-2003-0660

The CVE-2003-0660 issue is a vulnerability in the Authenticode verification mechanism used by Windows NT through Server 2003. Under low-memory conditions, an ActiveX control could be downloaded and installed without prompting the user, enabling remote code execution with the user’s privileges whe...

CVE-2003-0662

Buffer overflow in Troubleshooter ActiveX Control Tshoot.ocx in Microsoft Windows 2000 SP4 and earlier allows remote attackers to execute arbitrary code via an HTML document with a long argument to the RunQuery2 method...

CVE-2003-0712

Cross-site scripting XSS vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web Access OWA allows remote attackers to execute arbitrary web script...

CVE-2003-0711

Stack-based buffer overflow in the PCHealth system in the Help and Support Center function in Windows XP and Windows Server 2003 allows remote attackers to execute arbitrary code via a long query in an HCP URL...