10089 matches found
CVE-2003-0615
Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...
CVE-2003-0619
Integer signedness error in the decodefh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service kernel panic via a negative size value within XDR data of an NFSv3 procedure call...
CVE-2003-0649
Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long HOME environment variable...
CVE-2003-0655
rscsi in cdrtools 2.01 and earlier allows local users to overwrite arbitrary files and gain root privileges by specifying the target file as a command line argument, which is modified while rscsi is running with privileges...
CVE-2003-0669
Unknown vulnerability in Solaris 2.6 through 9 causes a denial of service system panic via "a rare race condition" or an attack by local users...
CVE-2003-0187
The connection tracking core of Netfilter for Linux 2.4.20, with CONFIGIPNFCONNTRACK enabled or the ipconntrack module loaded, allows remote attackers to cause a denial of service resource consumption due to an inconsistency with Linux 2.4.20's support of linked lists, which causes Netfilter to...
CVE-2003-0426
The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator...
CVE-2003-0467
Unknown vulnerability in ipnatsackadjust of Netfilter in Linux kernels 2.4.20, and some 2.5.x, when CONFIGIPNFNATFTP or CONFIGIPNFNATIRC is enabled, or the ipnatftp or ipnatirc modules are loaded, allows remote attackers to cause a denial of service crash in systems using NAT, possibly due to an...
CVE-2003-0599
Unknown vulnerability in the Virtual File System VFS capability for phpGroupWare 0.9.16preRC and versions before 0.9.14.004 with unknown implications, related to the VFS path being under the web document root...
CVE-2003-0605
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service crash, and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the RemoteGetClassObject interface that cause a NULL pointer to be passed to th...
CVE-2003-0611
Multiple buffer overflows in xtokkaetama 1.0 allow local users to gain privileges via a long 1 -display command line argument or 2 XTOKKAETAMADIR environment variable...
CVE-2003-0625
Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the server's response...
CVE-2003-0645
man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the /.manpath file, even when running setuid, which could allow local users to gain privileges...
CVE-2003-0646
Multiple buffer overflows in ActiveX controls used by Trend Micro HouseCall 5.5 and 5.7, and Damage Cleanup Server 1.0, allow remote attackers to execute arbitrary code via long parameter strings...
CVE-2003-0647
Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via an extremely long 2GB HTTP GET request...
CVE-2003-0187
...
CVE-2003-0699
...
CVE-2003-0685
...