CVE-2003-0598

CVE-2003-0598 is a reservation duplicate of CVE-2003-0657 (NVD entry notes this and instructs reference to CVE-2003-0657). The active vulnerability described in the connected records is CVE-2003-0657: multiple SQL injection vulnerabilities in the infolog module of phpgroupware, affecting 0.9.14 a...

CVE-2003-0613

CVE-2003-0613 concerns a buffer overflow in zblast-svgalib (zblast 1.2.1 and earlier) that could allow a local user to execute arbitrary code via the high score file. Debian/Red Hat advisories confirm the vulnerability is local and provide fixes: upgrade zblast to the Debian 1.2pre-5woody2 (stabl...

CVE-2003-0645

man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the /.manpath file, even when running setuid, which could allow local users to gain privileges...

CVE-2003-0672

Removed by vendor...

CVE-2003-0670

Sustworks IPNetSentryX and IPNetMonitorX are affected. The setuid helper applications RunTCPDump (invokes tcpdump) and RunTCPFlow (invokes tcpflow) allow local users to sniff network packets, exposing partial confidentiality. Root cause is the presence of setuid wrappers enabling packet capture. ...

CVE-2003-0656

eroaster before 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file that is used as a lockfile...

CVE-2003-0669

The CVE-2003-0669 entry relates to Solaris, affecting versions 2.6 through 9. The vulnerability is described as unknown, causing a denial of service (system panic) via a rare race condition or an attack by local users. The available connected documents do not provide concrete technical details su...

CVE-2003-0645

CVE-2003-0645 affects man-db 2.3.12 and 2.3.18 up to 2.4.1, where user-controlled DEFINE directives in ~/.manpath are honored even when running setuid, allowing local escalation to the 'man' user. The vulnerability is described across multiple sources (Debian SUSE OSV/openvas/NVD) with local-priv...

CVE-2003-0656

CVE-2003-0656 affects eroaster; a local user can overwrite arbitrary files by exploiting a symlink attack on the temporary lockfile used during operation. Public advisories (Debian DSA-366-1 and related entries) describe the issue as insecure temporary file creation. The vulnerability is fixed in...

CVE-2003-0546

CVE-2003-0546 affects up2date 3.0.7 and 3.1.23, which do not properly verify RPM GPG signatures. This could let remote attackers install unsigned packages from the Red Hat Network if that network is compromised. The CVSS base score is 7.5 (HIGH). Exploitation details are not provided in the suppl...

CVE-2003-0672

CVE-2003-0672 describes a format-string vulnerability in pam-pgsql 0.5.2 and earlier, where the username supplied during authentication is treated as a format string when writing logs. This can allow remote attackers to execute arbitrary code with the privileges of the PAM-authenticating process....

CVE-2003-0669

Unknown vulnerability in Solaris 2.6 through 9 causes a denial of service system panic via "a rare race condition" or an attack by local users...

CVE-2003-0677

CVE-2003-0677 affects Cisco CSS 11000 routers on the CS800 chassis. The vulnerability enables denial of service via a flood of TCP SYN packets to the circuit IP address, causing high CPU usage or a reboot. The available documents do not provide specific affected firmware versions or official fixe...

ecartis buffer overflows and input validation bugs

Timo Sirainen reports multiple buffer overflows that may be triggered while parsing messages, as well as input validation errors that could result in disclosure of mailing list passwords. These bugs were resolved in the August 2003 snapshot of ecartis...

Oracle XDB FTP Service - UNLOCK Buffer Overflow

/ Oracle XDB FTP Service UNLOCK Buffer Overflow Exploit / / David Litchfield from ngssoftware at Blackhat 2003/ / / / Original Advisory : / / http://www.blackhat.com/presentations/bh-usa-03/bh- / / us-03-litchfield-paper.pdf / include include include int GainControlOfOraclechar , char ; int...

Oracle XDB FTP Service - UNLOCK Buffer Overflow

Oracle XDB FTP Service - UNLOCK Buffer Overflow / Oracle XDB FTP Service UNLOCK Buffer Overflow Exploit / / David Litchfield from ngssoftware at Blackhat 2003/ / / / Original Advisory : / / http://www.blackhat.com/presentations/bh-usa-03/bh- / / us-03-litchfield-paper.pdf / include include includ...

Oracle XDB FTP Service UNLOCK Buffer Overflow Exploit

No description provided by source. / Oracle XDB FTP Service UNLOCK Buffer Overflow Exploit / / David Litchfield from ngssoftware at Blackhat 2003 / / / / Original Advisory : / / http://www.blackhat.com/presentations/bh-usa-03/bh- / / us-03-litchfield-paper.pdf / include stdio.h include windows.h...

CVE-2003-0504

Multiple cross-site scripting XSS vulnerabilities in Phpgroupware 0.9.14.003 aka webdistro allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to index.php in the addressbook module...

CVE-2003-0506

Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service shutdown of NetMeeting conference via malformed packets, as demonstrated via the chat conversation...

CVE-2003-0475

Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request containing URL-encoded .. sequences "%5c%2e%2e", a different vulnerability than CVE-2003-0474...