CVE-2003-0528

Heap-based buffer overflow in the Distributed Component Object Model DCOM interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 Blaster/Nachi and CVE-2003-0715...

CVE-2003-0705

CVE-2003-0705 corresponds to a buffer overflow in mah-jong (versions 1.5.6 and earlier) that allowed remote attackers to execute arbitrary code. Multiple connected sources (Debian DSA-378-1, OpenVAS NASL, and related advisories) document this as a remote vulnerability in the mah-jong server/clien...

CVE-2003-0764

The CVE-2003-0764 entry concerns the Escapade Scripting Engine (ESP). Affected: ESP; Issue: remote attackers can obtain sensitive path information through a malformed request that causes the server to leak the path in an error message, demonstrated via the PAGE parameter. Impact: partial disclosu...

CVE-2003-0763

CVE-2003-0763 describes a Cross-site scripting (XSS) vulnerability in the Escapade Scripting Engine (ESP). The issue arises from unsanitized input in the method parameter (demonstrated via the PAGE parameter), enabling remote attackers to inject arbitrary script. Documents indicate the affected c...

CVE-2003-0767

Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and 0.27 and earlier for Linux and BSD, allows remote attackers to cause a denial of service and execute arbitrary code via a client request with a large length value...

CVE-2003-0704

KisMAC before 0.05d is affected. The vulnerability arises because it trusts user-supplied variables when chown’ing files or directories, allowing a local user to escalate privileges via the $DRIVER_KEXT environment variable in the scripts: viha_driver.sh, macjack_load.sh, airojack_load.sh, setuid...

CVE-2003-0541

CVE-2003-0541 affects gtkhtml (used by Evolution). The vulnerability is a remote null pointer dereference in gtkhtml when parsing certain malformed messages, leading to a denial of service (crash). Affected: gtkhtml versions earlier than the patched releases referenced in connected advisories. Mi...

CVE-2003-0766

Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious servers to execute arbitrary code via 1 a long FTP banner, 2 a long response to a USER command, or 3 a long response to a PASS command...

CVE-2003-0776

CVE-2003-0776 affects the saned daemon in sane-backends (earlier than or equal to 1.0.7). The issue arises because saned does not validate RPC numbers before accessing parameters, enabling unintended behavior that can lead to reliability issues (and, per related advisories, remote exploitation sc...

CVE-2003-0765

The CVE-2003-0765 entry affects the IN_MIDI.DLL plugin (version 3.01 and earlier) used by Winamp 2.91. According to the description, a remote attacker could execute arbitrary code by feeding a MIDI file containing a large Track data size value. The connected documents confirm Winamp/IN_MIDI.DLL a...

CVE-2003-0777

saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service segmentation fault...

CVE-2003-0761

CVE-2003-0761 describes a buffer overflow in the get_msg_text function of chan_sip.c within the SIP implementation of Asterisk, affecting releases prior to August 15, 2003. The flaw allows remote attackers to cause arbitrary code execution via certain MESSAGE or INFO requests. Affected component:...

CVE-2003-0760

Blubster 2.5 allows remote attackers to cause a denial of service crash via a flood of connections to UDP port 701...

CVE-2003-0768

Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting XSS and Script Injection protection feature via a null character in the beginning of a tag name...

CVE-2003-0765

The INMIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value...

CVE-2003-0703

KisMAC before 0.05d trusts user-supplied variables to load arbitrary kernels or kernel modules, which allows local users to gain privileges via the $DRIVERKEXT environment variable as used in 1 vihadriver.sh, 2 macjackload.sh, or 3 airojackload.sh, or 4 via "similar techniques" using...

CVE-2003-0704

KisMAC before 0.05d trusts user-supplied variables when chown'ing files or directories, which allows local users to gain privileges via the $DRIVERKEXT environment variable in 1 vihadriver.sh, 2 macjackload.sh, 3 airojackload.sh, 4 setuidenable.sh, 5 setuiddisable.sh, and using a "similar...

CVE-2003-0776

saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences...

CVE-2003-0777

The CVE-2003-0777 issue affects the sane-backends package (notably the saned daemon). When debug messages are enabled and a connection is dropped, strings may not be null-terminated, potentially triggering a segmentation fault (denial of service). Multiple advisories reference this family of prob...

CVE-2003-0775

CVE-2003-0775 affects sane-backends (notably the saned daemon) up to version 1.0.7 and earlier. The root cause is that saned mallocs memory based on a size value, which can be sent, or may be left unknown if the connection is dropped before the size is transmitted, enabling remote attackers to tr...