CVE-2003-0862

CVE-2003-0862 is rejected/not used per the initial description.

CVE-2003-0860

CVE-2003-0860 affects PHP before 4.3.3. The issue: buffer overflows in PHP with unknown impact/attack vectors per NVD; Red Hat et al. similarly cite buffer overflows in older PHP. Public fix available: upgrade to PHP 4.3.3 (see php.net release notes).

CVE-2003-1062

Unknown vulnerability in the sysinfo system call for Solaris for SPARC 2.6 through 9, and Solaris for x86 2.6, 7, and 8, allows local users to read kernel memory...

CVE-2003-0864

Buffer overflow in mjoin in channel.c for IRCnet IRCD 2.10.x to 2.10.3p3 allows remote attackers to cause a denial of service...

CVE-2003-0860

Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors...

WinSyslog Long Syslog Message Remote DoS

The remote host is running WinSyslog, an enhanced syslog server for Windows. A vulnerability in the product allows remote attackers to cause the WinSyslog to freeze, which in turn will also freeze the operating system on which the product executes. WinSysLog DoS http://www.winsyslog.com Changes b...

MS03-042: Buffer Overflow in Windows Troubleshooter ActiveX Control (826232)

The remote host contains a version of the Troubleshooter ActiveX control module that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2003-1061

Race condition in Solaris 2.6 through 9 allows local users to cause a denial of service kernel panic, as demonstrated via the namefs function, pipe, and certain STREAMS routines...

MS03-023: Buffer Overrun In HTML Converter Could Allow Code Execution (823559)

The remote host contains a version of the HTML Converter module that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit this web page. C Tenable Network Security, Inc. include"compat.inc"; if description...

Bad news on RPC DCOM vulnerability

Dear [email protected], There are few bad news on RPC DCOM vulnerability: 1. Universal exploit for MS03-039 exists in-the-wild, PINK FLOYD is again actual. 2. It was reported by exploit author and confirmed, Windows XP SP1 with all security fixes installed still vulnerable to variant of t...

Gallery index.php GALLERY_BASEDIR Parameter Remote File Inclusion

The version of Gallery hosted on the remote web server is affected by a remote file inclusion vulnerability due to the application failing to properly sanitize user-supplied input to the 'GALLERYBASEDIR' parameter of the 'index.php' script. An attacker may use this flaw to inject arbitrary code i...

CVE-2003-0849

Cfengine CFServD ReceiveTransaction Function Remote Overflow (CVE-2003-0849): A stack-based buffer overrun in cfservd’s ReceiveTransaction, triggered by crafted transactions, affects cfengine 2.x before 2.0.8. An attacker with network access can send a manipulated packet to cfservd, potentially a...

CVE-2003-0842

CVE-2003-0842 describes a stack-based buffer overflow in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier (and possibly later official versions) when running in debug mode. An attacker can trigger arbitrary code execution remotely by sending a GET request with a long filename and an Accept-Enco...

CVE-2003-0847

SuSEconfig.susewm in the susewm package on SuSE Linux 8.2Pro allows local users to overwrite arbitrary files via a symlink attack on the susewm.$$ temporary file...

CVE-2003-0847

CVE-2003-0847 : The SuSEconfig.susewm component in the susewm package on SuSE Linux 8.2Pro is vulnerable to a local, symlink-based attack on the susewm.$$ temporary file, enabling local users to overwrite arbitrary files. The vulnerability is described as a local-priority issue with partial confi...

CVE-2003-0845

Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct unauthorized activities and possibly execute arbitrary code via certain SQL statements to 1 TCP port 1701 in JBoss 3.2.1, a...

CVE-2003-0842

Stack-based buffer overflow in modgzipprintf for modgzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode, allows remote attackers to execute arbitrary code via a long filename in a GET request with an "Accept-Encoding: gzip" header...

CVE-2003-0839

Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitrary files via .. dot dot sequences in a "shell:" link...

CVE-2003-0848

CVE-2003-0848 is a heap-based buffer overflow in slocate (up to 2.7) triggered by processing a crafted slocate database, allowing a local user to gain privileges to the slocate group and access the central database. The root cause is unsafe handling of the database path and length, leading to a n...

CVE-2003-0841

CVE-2003-0841 concerns PeopleSoft 8.42 where the grid option stores temporary .xls files in guessable directories under the web document root. This can allow remote attackers to access the files directly via URL and steal search results, constituting a partial confidentiality impact as described ...