10089 matches found
CVE-2003-0770
FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement...
CVE-2003-0772
WS_FTP 3 and 4 are affected by multiple buffer overflows triggered by long APPE (append) or STAT (status) arguments, enabling remote authenticated users to cause a denial of service and potentially execute arbitrary code. Affected software: WS_FTP versions 3 and 4. Root cause: buffer overflows in...
CVE-2003-0703
KisMAC (before 0.05d) is vulnerable to local privilege escalation caused by trusting user-supplied variables to load arbitrary kernels or kernel modules via the DRIVER_KEXT environment variable. The vulnerability is triggered through scripts (viha_driver.sh, macjack_load.sh, airojack_load.sh) or ...
CVE-2003-0780
CVE-2003-0780 is a buffer overflow in MySQL affecting versions prior to 3.23.58 and 4.0.14-era releases, triggered by a Password field longer than allowed in sql_acl.cc get_salt_from_password. An attacker with ALTER TABLE privileges could potentially execute arbitrary code as the MySQL user. Reme...
CVE-2003-0773
CVE-2003-0773 affects the sane-backends package (SANE) prior to version 1.0.7, where saned does not validate the IP address of the connecting host during the SANE_NET_INIT RPC. This allows remote attackers to access saned services even if saned.conf would restrict them. The issue is part of multi...
CVE-2003-0771
Gallery.pm in Apache::Gallery aka A::G uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does...
CVE-2003-0778
saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow attackers to cause a denial of service memory consumption...
CVE-2003-0767
The CVE-2003-0767 entry describes a buffer overflow in RogerWilco components: the RogerWilco graphical server (1.4.1.6 and earlier), Windows dedicated server (0.32a and earlier), and Linux/BSD versions (0.27 and earlier). The flaw allows remote attackers to trigger a denial of service and potenti...
CVE-2003-0779
SQL injection vulnerability in the Call Detail Record CDR logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string...
CVE-2003-0775
saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service memory consumption or crash...
CVE-2003-0720
Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type...
CVE-2003-0778
CVE-2003-0778 affects the sane-backends package (notably saned) and is described as a memory allocation vulnerability that can allow a remote attacker to cause denial of service by exhausting memory. The initial entry notes vulnerable versions up to 1.0.7 and possibly later, with the issue arisin...
CVE-2003-0715
CVE-2003-0715 describes a heap-based buffer overflow in the Windows RPCSS DCOM interface that can be triggered by a malformed DCERPC DCOM object activation request with modified length fields, enabling remote code execution. Affected: Windows NT 4.0 SPx, 2000, XP, and Server 2003 (DCOM RPC interf...
CVE-2003-0528
Technical details for CVE-2003-0528 are not publicly provided in the supplied documents. Monitor for updates from official advisories; related CVEs (e.g., CVE-2003-0352) are discussed but do not specify 0528 specifics.
CVE-2003-0706
CVE-2003-0706 indicates an unknown vulnerability in mah-jong 1.5.6 and earlier that allows remote attackers to cause a denial of service via a tight loop. Remediation is evidenced by Debian advisory DSA-378-1 (mah-jong), which documents the issue and the availability of a security update; no othe...
CVE-2003-0720
Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type...
CVE-2003-0774
saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service segmentation fault when invalid memory is accessed...
CVE-2003-0720
CVE-2003-0720 concerns PINE, a mail client, with a buffer overflow vulnerability in the handling of the message/external-body MIME type. Affected software is PINE prior to version 4.58. The issue allows remote attackers to execute arbitrary code when a user processes a specially crafted e‑mail, p...
Denial of Service Vulnerability in NFS XDR decoding Update
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Denial of Service Vulnerability in NFS XDR decoding Update Number : 20030801-02-P Date : September 9, 2003 Reference: CVE CAN-2003-0576 Reference: SGI BUGS 894659, 898951 Fixed in : IRIX 6.5.20 or patches listed below for IRIX...
