CVE-2003-0787

OpenSSH CVE-2003-0787 affects OpenSSH 3.7.1 and 3.7.1p1 where the PAM conversation function mishandles an array of structures as an array of pointers, allowing stack modification and potential privilege escalation. The linked F5 advisory acknowledges PAM conversation stack corruption but does not...

CVE-2003-0787

The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges...

CVE-2003-0786

The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges...

Software602 602Pro LAN SUITE 2003 - Sensitive User Information Storage

source: https://www.securityfocus.com/bid/8700/info A problem with the storage of user credentials has been identified in Software602 602Pro LAN SUITE 2003. Because of this, an attacker may be able to gain access to potentially sensitive information. http://www.example.com/mail/S030904L.LOG...

lansuite2003.txt

TITLE ===== 602Pro Lansuite 2003 - Multiple Vulnerabilities DESCRIPTION =========== “602Pro LAN SUITE is an easy-to-install and manage all-in-one server application. Its standards-based SMTP/POP3 e-mail server provides effective e-mail communication without the risk of destructive virus...

CVE-2003-0697

Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows local users to cause a denial of service crash or gain root privileges...

CVE-2003-0785

ipmasq before 3.5.12, in certain configurations, may forward packets to the external interface even if the packets are not associated with an established connection, which could allow remote attackers to bypass intended filtering...

CVE-2003-0697

CVE-2003-0697 describes a format string vulnerability in the lpd component within the bos.rte.printers fileset on AIX 4.3–5.2, reportedly triggered when debug is enabled. The flaw allows local users to cause a denial of service (crash) and could potentially escalate to root privileges. Affected s...

CVE-2003-0785

CVE-2003-0785 affects ipmasq (pre-3.5.12) where faulty filtering rules can forward traffic from the external interface for internal hosts even when not established, bypassing filtering. Root cause: improper packet-filtering rules in ipmasq. Impact: remote attacker could bypass access control on a...

CVE-2003-0826

lsh daemon lshd does not properly return from certain functions in 1 readline.c, 2 channelcommands.c, or 3 clientkeyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack...

CVE-2003-0827

CVE-2003-0827 concerns the IBM DB2 Discovery Service. The DB2 discovery service on UDP port 523 can be crashed by a remote attacker sending a long UDP packet, causing a denial of service. The issue is associated with IBM DB2 before FixPak 10a. OpenVAS entries corroborate a UDP-based DoS affecting...

CVE-2003-0783

Multiple buffer overflows in hztty 2.0 allow local users to gain root privileges...

CVE-2003-0784

The entries describe a Format string vulnerability in the tsm package (bos.rte.security fileset) on AIX 5.2. The root cause is a format string flaw that can be exploited to gain root privileges via login (remote) and to gain privileges locally via login, su, or passwd when a username contains for...

CVE-2003-0783

CVE-2003-0783 relates to hztty. Multiple buffer overflows in hztty 2.0 allow a local attacker to gain root privileges. Debians DSA-385-1 (hztty) documents the issue and fixes, updating hztty to version 2.0-5.2woody1 and correcting a setuid root misconfiguration. The Debian advisories describe the...

CVE-2003-0827

The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service crash via a long packet to UDP port 523...

CVE-2003-0826

CVE-2003-0826 maps to CAN-2003-0826. The lsh server (lshd) contains a heap-based buffer overflow in functions in read_line.c, channel_commands.c, and client_keyexchange.c when processing long input, allowing remote code execution. Debian and OpenVAS advisories reference CAN-2003-0826 and CAN-2005...

CVE-2003-0826

lsh daemon lshd does not properly return from certain functions in 1 readline.c, 2 channelcommands.c, or 3 clientkeyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack...

CVE-2003-0773

saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANENETINIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf...

CVE-2003-0777

saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service segmentation fault...

CVE-2003-0780

Buffer overflow in getsaltfrompassword from sqlacl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field...