10089 matches found
CVE-2003-0843
Format string vulnerability in modgzipprintf for modgzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode and using the Apache log, allows remote attackers to execute arbitrary code via format string characters in an HTTP GET request with an "Accept-Encoding...
CVE-2003-0849
Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function...
CVE-2003-0840
The CVE-2003-0840 vulnerability is a local buffer overflow in dtprintinfo on HP-UX 11.00 (and potentially other OSes) that allows an unprivileged user to gain root privileges by supplying a long DISPLAY environment variable; exploitation details and affected software versions beyond HP-UX 11.00 a...
CVE-2003-0849
Removed by vendor...
CVE-2003-0843
CVE-2003-0843 concerns a format-string vulnerability in mod_gzip_printf within mod_gzip (v1.3.26.1a and earlier, possibly later builds) when running in debug mode and handling HTTP requests with Accept-Encoding: gzip. A remote attacker can cause arbitrary code execution by supplying format-string...
CVE-2003-0846
CVE-2003-0846 affects SuSEconfig.javarunt in the javarunt package on SuSE Linux 7.3Pro. The issue enables local users to overwrite arbitrary files via a symlink attack on the temporary file .java_wrapper, indicating a local elevation/impact on file integrity. The CVSS metrics in the initial entry...
CVE-2003-0844
The CVE affects mod_gzip 1.3.26.1a and earlier. In debug mode without the Apache log, it allows local users to overwrite arbitrary files via (1) a symlink attack on predictable temporary filenames on Unix, or (2) an NTFS hard link on Windows when the policy to strengthen default permissions is no...
CVE-2003-0846
SuSEconfig.javarunt in the javarunt package on SuSE Linux 7.3Pro allows local users to overwrite arbitrary files via a symlink attack on the .javawrapper temporary file...
CVE-2003-0839
CVE-2003-0839 is a directory traversal vulnerability in the Shell Folders capability of Microsoft Windows Server 2003. Remote attackers could read arbitrary files by using .. sequences in a shell: link. The vulnerability impacts the confidentiality of affected systems (CVSS v2 Base Score 5.0, MED...
ms2k3traversal.txt
Title: Microsoft Windows Server 2003 "Shell Folders" Directory Traversal Vulnerability http://www.geocities.co.jp/SiliconValley/1667/advisory08e.html Date: 8 October 2003 Author: Eiji James Yoshida [email protected] Vulnerable: Windows Server 2003 Internet Explorer 6.0 Overview: Windows...
CVE-2003-0836
CVE-2003-0836 concerns IBM DB2 Universal Database: a stack-based buffer overflow in the LOAD command. Affected versions are DB2 UDB v7.2 before Fixpak 10/10a and v8.1 before Fixpak 2. An attacker with Connect privileges can execute arbitrary code. IBM fixed the issue via Fixpak 10/10a for v7.2 an...
CVE-2003-0809
Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows remote attackers to execute arbitrary code via an HTML e-mail message or web page...
CVE-2003-0809
Microsoft Internet Explorer 5.01–6.0 is affected by CVE-2003-0809 due to improper handling of object tags returned from a Web server during XML data binding, enabling remote code execution via HTML email or web pages. Affected software: IE 5.01–6.0. Root cause: object/HTML data binding issue in I...
CVE-2003-0837
IBM DB2 Universal Database 7.2 for Windows is vulnerable to a stack-based buffer overflow in the INVOKE command (DARI). The issue allows an attacker with Connect privileges to execute arbitrary code on the affected system. The vulnerability affects Windows-specific code in v7.2 and was addressed ...
CVE-2003-0837
Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a, allows attackers with "Connect" privileges to execute arbitrary code via the INVOKE command...
Microsoft Windows Server 2003 "Shell Folders" Directory Traversal Vulnerability
Title: Microsoft Windows Server 2003 "Shell Folders" Directory Traversal Vulnerability http://www.geocities.co.jp/SiliconValley/1667/advisory08e.html Date: 8 October 2003 Author: Eiji James Yoshida [email protected] Vulnerable: Windows Server 2003 Internet Explorer 6.0 Overview: Windows...
CVE-2003-0838
CVE-2003-0838 concerns Internet Explorer where an attacker can bypass zone restrictions and cause arbitrary code execution by creating a popup window and inserting ActiveX object code with a data tag that IE may treat as HTML/Javascript but execute as an HTA application. The vulnerability is rela...
CVE-2003-0838
Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but later executes as...
CVE-2003-0791
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed...