10089 matches found
CVE-2003-0740
Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen, which allows local users to hijack the Stunnel server...
CVE-2003-0664
Microsoft Word 2000/97/98(J)/2002 contains a vulnerability where Word’s macro-security checks fail for certain document properties, allowing a malicious document to bypass macro security and automatically execute arbitrary macros. Impact: remote code execution likely under the user’s privileges w...
MS03-037: Visual Basic for Application Overflow (822715)
The remote host is running a version of Microsoft Visual Basic for Applications that is vulnerable to a buffer overflow when handling malformed documents. An attacker may exploit this flaw to execute arbitrary code on this host by sending a malformed file to a user of the remote host. C Tenable...
CVE-2003-0727
Multiple buffer overflows in the XML Database XDB functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions...
CVE-2003-0729
CVE-2003-0729 describes a buffer overflow in Tellurian TftpdNT 1.8 that can be triggered by a TFTP request with a long filename, allowing remote code execution. The vulnerability is documented across multiple sources (NVD CVE entry, CVE Record) with an impact profile indicating potential arbitrar...
CVE-2003-0730
CVE-2003-0730 refers to multiple integer overflows in the XFree86 font libraries (version 4.3.0 and earlier). The flaws can allow a remote or local attacker to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflows when transferring/enumerating fonts f...
CVE-2003-0702
Vulnerability CVE-2003-0702 affects ISS Server Sensor 7.0 XPU (versions 20.16, 20.18; likely other versions before 20.19) in conjunction with Microsoft IIS over SSL. Affects a specific ISAPI plugin that, when accessed via a certain URL, can cause a denial of service (crash) and potentially allow ...
CVE-2003-0725
The CVE-2003-0725 entry refers to a buffer overflow in the RTSP protocol parser of the View Source plug-in (vsrcplin.so/vsrcplin3260.dll) used by RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7, and RealServer G2. Public sources (OpenVAS/NASL) describe a vulnerable condition in R...
CVE-2003-0723
Affected software: gkrellm/gkrellmd; part of the gkrellm monitor package, versions 2.1.x before 2.1.14. Root cause: a buffer overflow in gkrellmd, triggered while reading data from connected clients. Impact: may allow remote arbitrary code execution on the gkrellm server. Evidence: Mandrake MDKSA...
CVE-2003-0686
CVE-2003-0686 describes a buffer overflow in the pam_smb PAM module (versions ≤ 1.1.6) used for authenticating to a remote SMB service. The vulnerability can allow remote code execution with the privileges of the PAM service when a long password is processed, affecting servers using pam_smb in re...
CVE-2003-0686
Buffer overflow in PAM SMB module pamsmb 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code...
CVE-2003-0689
The getgrouplist function in GNU libc glibc 2.2.4 and earlier allows attackers to cause a denial of service segmentation fault and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow...
CVE-2003-0708
Format string vulnerability in LinuxNode node before 0.3.2 may allow attackers to cause a denial of service or execute arbitrary code...
CVE-2003-0729
Buffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a TFTP request with a long filename...
CVE-2003-0728
CVE-2003-0728 affects Horde before 2.2.4. The vulnerability allows remote malicious websites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL. The NVD entry lists a CVSSv2 base score of 6.4 (Medium) with network access, low attack complexity, and no u...
CVE-2003-0727
CVE-2003-0727 refers to multiple buffer overflows in the Oracle 9i Database Release 2 XML DB (XDB) functionality. Public references describe stack/buffer overflow conditions in Oracle 9i XDB services (HTTP and FTP) that can be triggered by long inputs to XDB commands, enabling local users to caus...
CVE-2003-0658
Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files via a certain URL, possibly related to rewrite rules...
CVE-2003-0730
Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflow attacks...
CVE-2003-0726
RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is executed in the security context of the previously loaded URL, as demonstrated using a "javascript:" URL in the area tag...