Sendmail < 8.12.10 prescan() Function Remote Overflow

According to its version number, the remote Sendmail server is between 5.79 to 8.12.9. Such versions are reportedly vulnerable to remote buffer overflow attacks, one in the 'prescan' function and another involving its ruleset processing. A remote user may be able to leverage these issues to gain...

MS03-039 Exploitation Backdoor Account Detection

It was possible to log into the remote host with the login 'e' and the password 'asd321'. A widely available exploit, using one of the vulnerabilities described in the Microsoft Bulletin MS03-039 creates such an account. This probably means that the remote host has been compromised by the use of...

CVE-2003-0770

CVE-2003-0770 affects IkonBoard, specifically versions 3.1.2a and earlier (including 3.1.1). The root cause is that the FUNC.pm code does not properly cleanse the lang cookie when it contains illegal characters, allowing a remote attacker to trigger arbitrary code execution via a Perl evaluation ...

CVE-2003-0769

CVE-2003-0769 describes a cross-site scripting (XSS) flaw in ICQ Web Front guestbook (guestbook.html) where an attacker can inject arbitrary script via the message field. The vulnerability arises in the guestbook component, enabling potentially arbitrary HTML/script execution by remote attackers....

CVE-2003-0776

saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences...

CVE-2003-0764

The CVE-2003-0764 entry concerns the Escapade Scripting Engine (ESP). Affected: ESP; Issue: remote attackers can obtain sensitive path information through a malformed request that causes the server to leak the path in an error message, demonstrated via the PAGE parameter. Impact: partial disclosu...

CVE-2003-0767

Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and 0.27 and earlier for Linux and BSD, allows remote attackers to cause a denial of service and execute arbitrary code via a client request with a large length value...

CVE-2003-0705

CVE-2003-0705 corresponds to a buffer overflow in mah-jong (versions 1.5.6 and earlier) that allowed remote attackers to execute arbitrary code. Multiple connected sources (Debian DSA-378-1, OpenVAS NASL, and related advisories) document this as a remote vulnerability in the mah-jong server/clien...

CVE-2003-0762

CVE-2003-0762 affects Foxweb 2.5 CGI (foxweb.dll and foxweb.exe). The vulnerability is a remote stack buffer overflow triggered by a long URL (PATH_INFO value), allowing remote attackers to execute arbitrary code or crash the web server. Several sources (NVD/Nessus/OpenVAS/Red Hat) describe the i...

CVE-2003-0763

CVE-2003-0763 describes a Cross-site scripting (XSS) vulnerability in the Escapade Scripting Engine (ESP). The issue arises from unsanitized input in the method parameter (demonstrated via the PAGE parameter), enabling remote attackers to inject arbitrary script. Documents indicate the affected c...

CVE-2003-0774

CVE-2003-0774 affects saned in sane-backends up to 1.0.7. The issue stems from poor handling of connection drops, allowing a remote attacker to trigger memory access after the wire buffer and cause a segmentation fault (DoS). Affected platforms include Debian, Red Hat, SuSE, Mandrake, and related...

CVE-2003-0541

gtkhtml before 1.1.10, as used in Evolution, allows remote attackers to cause a denial of service crash via a malformed message that causes a null pointer dereference...

CVE-2003-0721

CVE-2003-0721 affects the Pine mail client, with a vulnerability in rfc2231_get_param() in strings.c that allows remote code execution via a crafted email, caused by an integer signedness/out-of-bounds issue. Affected versions are Pine prior to 4.58; multiple advisories (Red Hat RHSA-2003:274, SU...

CVE-2003-0715

Heap-based buffer overflow in the Distributed Component Object Model DCOM interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352...

CVE-2003-0760

CVE-2003-0760 affects Blubster 2.5. The vulnerability lets remote attackers cause a denial of service (crash) by flooding UDP port 701 with connections. Reported impact is partial availability; no further exploitation details, affected versions, or remediation are provided in the connected docume...

CVE-2003-0766

The CVE-2003-0766 entry describes multiple heap-based buffer overflows in an FTP Desktop client (version 3.5 and possibly earlier) that allow remote servers to execute arbitrary code. The vectors are a long FTP banner, a long response to a USER command, or a long response to a PASS command. The d...

CVE-2003-0773

saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANENETINIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf...

CVE-2003-0771

Gallery.pm in Apache::Gallery aka A::G uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does...

CVE-2003-0773

saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANENETINIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf...

CVE-2003-0775

saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service memory consumption or crash...