CVE-2003-0644

...

CVE-2003-0750

The CVE-2003-0750 entry concerns secure.php in PY-Membres 4.2 and earlier, where remote attackers can bypass authentication by setting the adminpy parameter. Affected component is the secure.php authentication logic in PY-Membres; the root cause is an authentication bypass via a crafted adminpy p...

CVE-2003-0747

CVE-2003-0747 affects SAP Internet Transaction Server (ITS) 4620.2.0.323011 via its wgate.dll. The vulnerability arises from incorrect parameters (~service, ~templatelanguage, ~language, ~theme, ~template) that cause error messages to leak potentially sensitive information, including directory st...

CVE-2003-0747

wgate.dll in SAP Internet Transaction Server ITS 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters 1 service, 2 templatelanguage, 3 language, 4 theme, or 5 template, which leaks the...

CVE-2003-0749

CVE-2003-0749 describes an XSS vulnerability in SAP Internet Transaction Server (ITS) involving wgate.dll. The affected component is wgate.dll (SAP ITS) with version details in the description, and the vulnerability is exploitable via the ~service parameter to inject arbitrary web script and stea...

CVE-2003-0752

The CVE-2003-0752 entry concerns AttilaPHP 3.0 (and possibly earlier) with an SQL injection in global.php3 that lets remote attackers bypass authentication via a modified cook_id parameter. This vulnerability is categorized with a CVSS v2 base score of 7.5 (HIGH) and a network attack vector with ...

CVE-2003-0746

CVE-2003-0746 is a composite DoS entry tied to earlier MS03-026-style DCOM/RPC vulnerabilities (CVE-2003-0352, CVE-2003-0605). Connected sources confirm that multiple DCE/ RPC implementations, notably Microsoft Windows RPCSS/DCOM interfaces, could be overwhelmed by malformed DCERPC messages, with...

CVE-2003-0743

CVE-2003-0743 affects Exim 3 (before 3.36) and Exim 4 (before 4.21); a heap-based buffer overflow in smtp_in.c triggered by long, space-filled HELO/EHLO arguments followed by a NULL and newline could let remote attackers execute code. Debian advisory DSA-376 notes the remediation: updates to exim...

CVE-2003-0744

The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service process hang and termination via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input...

CVE-2003-0746

Various Distributed Computing Environment DCE implementations, including HP OpenView, allow remote attackers to cause a denial of service process hang or termination via certain malformed inputs, as triggered by attempted exploits against the vulnerabilities CVE-2003-0352 or CVE-2003-0605, such a...

CVE-2003-0753

CVE-2003-0753 affects nphpd.php in newsPHP 216 and earlier. The issue allows remote attackers to read arbitrary files by supplying a full pathname to the target file in the nphp_config[LangFile] parameter, exposing confidential data. The provided documents corroborate the vulnerability descriptio...

CVE-2003-0755

The CVE-2003-0755 vulnerability affects gtkftpd 1.0.4 and earlier. A buffer overflow in sys_cmd.c allows remote attackers to execute arbitrary code by crafting long directory names and listing them with the LIST command. The issue (root cause) is an overflow in handling directory names; impact is...

CVE-2003-0744

The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service process hang and termination via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input...

CVE-2003-0744

CVE-2003-0744 affects the leafnode NNTP client’s fetchnews component, specifically versions 1.9.3 through 1.9.41. The underlying issue is triggered by certain malformed Usenet articles that cause fetchnews to hang while waiting for input, leading to a denial of service (process hang and terminati...

CVE-2003-0745

SNMPc 6.0.8 and earlier are affected. The vulnerability arises because authentication is performed to the server on the client side, allowing remote attackers to gain privileges by decrypting the password returned by the server. The connected Red Hat, NVD, CVE and CVE records confirm the same des...

CVE-2003-0748

Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server ITS 4620.2.0.323011 allows remote attackers to read arbitrary files via ..\ dot-dot backslash sequences in the theme parameter and a template parameter with a filename followed by space characters, which can preven...

CVE-2003-0754

CVE-2003-0754 concerns nphpd.php in newsPHP 216 and earlier where remote attackers can bypass authentication by sending an HTTP request that uses a modified nphp_users array. The root cause is insufficient validation of the authentication data, allowing an attacker-controlled user list to grant a...

CVE-2003-0740

Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen, which allows local users to hijack the Stunnel server...

CVE-2003-0665

CVE-2003-0665 is a buffer overflow in the ActiveX control used by Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002. The vulnerability allows remote attackers to execute arbitrary code by sending long parameters to the control. Evidence from multiple sources confirms the root cause a...

CVE-2003-0733

Multiple cross-site scripting XSS vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary web script and steal authentication credentials via 1 a forward instruction to the Servlet container...