CVE-2003-0645

man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the /.manpath file, even when running setuid, which could allow local users to gain privileges...

CVE-2003-0701

CVE-2003-0701 describes a buffer overflow in Internet Explorer 6 SP1 for languages using double-byte encodings (e.g., Japanese) that can allow remote code execution via the Type property of an OBJECT tag. The root cause is a vulnerability in how IE handles the OBJECT element’s Type attribute, ena...

CVE-2003-0532

Technical details for CVE-2003-0532 are not publicly available in the provided documents. The connected items discuss other Internet Explorer vulnerabilities (not CVE-2003-0532) such as CVE-2003-0838 and HTA-related issues; monitor for updates.

CVE-2003-0530

The vulnerability CVE-2003-0530 is a buffer overflow in the BR549.DLL ActiveX control used by Internet Explorer (IE) 5.01 SP3 through 6.0 SP1, allowing remote code execution when processing crafted HTML. OpenVAS notes the July 2004 IE cumulative patch should be applied; CERT/KB details describe t...

CVE-2003-0548

GDM (GNOME Display Manager) vulnerable to DoS via XDMCP in versions before 2.4.1.6. The issue affects the XDMCP handling and may cause the daemon to crash when certain authorization data or host expiry conditions are encountered. Public descriptions indicate the two related CVEs (CVE-2003-0548 an...

CVE-2003-0548

The X Display Manager Control Protocol XDMCP support for GDM before 2.4.1.6 allows attackers to cause a denial of service daemon crash when a chosen host expires, a different issue than CVE-2003-0549...

CVE-2003-0549

CVE-2003-0549 affects the GNOME Display Manager (GDM) prior to version 2.4.1.6, where the XDMCP feature can be abused to crash the gdm daemon, causing DoS via a short authorization key name. Public records in NVD and vendor advisories describe the issue as stemming from XDMCP handling, with the r...

CVE-2003-0547

GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the /.xsession-errors file...

CVE-2003-0531

CVE-2003-0531 maps to a vulnerability in Internet Explorer (IE) 5.01 SP3 through 6.0 SP1 where crafted Content-Type and Content-Disposition headers enable a remote attacker to access and execute script in the My Computer zone via the browser cache. The underlying flaw is IE’s handling of these he...

CVE-2003-0547

CVE-2003-0547 : GDM before 2.4.1.6 allows a local user to read arbitrary text files via a symlink attack on the ~/.xsession-errors file when using the “examine session errors” feature. Root cause: GDM runs as root during the examination, enabling file disclosure. Public advisories (e.g., Mandrake...

CVE-2003-0699

The C-Media PCI sound driver in Linux before 2.4.21 does not use the getuser function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0700...

CVE-2003-0654

CVE-2003-0654 describes a buffer overflow in autorespond (an email autoresponder used with qmail). The flaw could allow remote attackers to execute arbitrary code as the autorespond user via qmail. Public sources (NVD, Debian DSA-373-1) document this as a remote vulnerability with a base CVSS v2 ...

CVE-2003-0353

Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components MDAC 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434...

CVE-2003-0353

CVE-2003-0353 details a Unicode buffer overflow in the SQL-DMO component of Microsoft MDAC (versions 2.5–2.7) that can be exploited by a long UDP broadcast response on port 1434, enabling remote code execution. Affected packages include MDAC 2.5/2.6/2.7 with various SPs; fixes are described in MS...

EEYE: Internet Explorer Object Data Remote Execution Vulnerability

Internet Explorer Object Data Remote Execution Vulnerability Release Date: August 20, 2003 Reported Date: May 15, 2003 Severity: High Remote Code Execution Systems Affected: Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.0 Microsoft Internet Explore...

CVE-2003-1063

The patches 1 105693-13, 2 108800-02, 3 105694-13, and 4 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy...

CVE-2003-1202

The checklogin function in omail.pl for omail webmail 0.98.4 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 password, 2 domainname, or 3 username...

CVE-2003-0177

The CVE-2003-0177 entry concerns SGI IRIX 6.5.x (through 6.5.20f and possibly earlier) where /etc/group does not honor minus ('-') entries, causing subsequent group membership lines to be processed incorrectly. The issue is tied to the IRIX Name Service Daemon (nsd) and affects IRIX 6.5.x systems...

CVE-2003-0573

CVE-2003-0573 relates to SGI IRIX’s Name Service Daemon (nsd). The issue is that DNS callbacks in nsd on IRIX 6.5.x (through 6.5.20f and possibly earlier) do not perform sufficient sanity checking. The impact is not explicitly stated in the CVE description, and exploitation details are not provid...

CVE-2003-0574

CVE-2003-0574 relates to a System V /bin/login vulnerability (CVE-2001-0797) manifested as a buffer overflow via a large number of environment variables/arguments, enabling potential privilege escalation. Connected entries describe Solaris/SPARC telnet/rlogin vectors and several exploits (e.g., T...