CVE-2003-0650

Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. dot dot sequences in filenames in a .APK Zip file...

CVE-2003-0651

CVE-2003-0651 affects the Apache module mod_mylo, specifically the mylo_log logging function in versions

CVE-2003-0646

CVE-2003-0646 affects Trend Micro HouseCall (ActiveX controls) versions 5.5 and 5.7 and Trend Micro Damage Cleanup Server 1.0. The root cause is multiple buffer overflows in the ActiveX controls triggered by long parameter strings, enabling remote code execution. Affected software exposes vulnera...

CVE-2003-0647

The CVE-2003-0647 entries describe a buffer overflow in the Cisco IOS HTTP server (affected as of 12.2 and earlier) triggered by an extremely long HTTP GET request (up to around 2GB). This condition could allow remote attackers to execute arbitrary code on the router. Connected sources (Red Hat a...

CVE-2003-0187

The connection tracking core of Netfilter for Linux 2.4.20, with CONFIGIPNFCONNTRACK enabled or the ipconntrack module loaded, allows remote attackers to cause a denial of service resource consumption due to an inconsistency with Linux 2.4.20's support of linked lists, which causes Netfilter to...

CVE-2003-0617

mindi 0.58 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...

CVE-2003-0646

Multiple buffer overflows in ActiveX controls used by Trend Micro HouseCall 5.5 and 5.7, and Damage Cleanup Server 1.0, allow remote attackers to execute arbitrary code via long parameter strings...

CVE-2003-0468

Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate...

CVE-2003-0634

The vulnerability (CVE-2003-0634) affects Oracle9i Database Release 2/1 and Oracle 8i, due to a stack-based buffer overflow in the PL/SQL EXTPROC component. An authenticated (and in some cases arbitrary) database user can potentially execute arbitrary code by supplying a long library name. This s...

CVE-2003-0639

Unknown vulnerability in Novell iChain 2.2 before Support Pack 1 allows users to access restricted or secure pages without authentication...

CVE-2003-0633

CVE-2003-0633 affects Oracle E-Business Suite 11.5.1–11.5.8, specifically the AOL/J Setup Test Suite component aoljtest.jsp. The vulnerabilities allow a remote attacker to obtain sensitive information without authentication, including the GUEST user password and the application server security ke...

CVE-2003-0639

CVE-2003-0639 concerns Novell iChain 2.2 prior to Support Pack 1, where an unauthenticated user can access restricted pages. The vulnerability is described as an access control issue that allows bypassing authentication to reach secure content. The public records do not specify the exact vulnerab...

CVE-2003-0640

BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to overwrite usernames and passwords, which may allow Operators to gain Admin privileges...

CVE-2003-0632

Buffer overflow in the Oracle Applications Web Report Review FNDWRR CGI program FNDWRR.exe of Oracle E-Business Suite 11.0 and 11.5.1 through 11.5.8 may allow remote attackers to execute arbitrary code via a long URL...

CVE-2003-0637

Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing...

CVE-2003-0641

CVE-2003-0641 concerns WatchGuard ServerLock for Windows 2000 prior to SL 2.0.3. The issue allows local users to load arbitrary modules by abusing OpenProcess, demonstrated through three techniques: (1) DLL injection, (2) ZwSetSystemInformation, and (3) API hooking in OpenProcess. The affected co...

CVE-2003-0642

CVE-2003-0642 concerns WatchGuard ServerLock for Windows 2000 before SL 2.0.4. The vulnerability is that local users can access kernel memory via a symlink attack on \Device\PhysicalMemory. The root cause is a symlink-based path manipulation that permits local access to kernel memory, leading to ...

CVE-2003-0634

Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database users in some cases, to execute arbitrary code via a long library name...

CVE-2003-0642

WatchGuard ServerLock for Windows 2000 before SL 2.0.4 allows local users to access kernel memory via a symlink attack on \Device\PhysicalMemory...

CVE-2003-0636

CVE-2003-0636 concerns Novell iChain 2.2 before Support Pack 1, where the product does not properly verify that URL redirects match the DNS name of an accelerator. This mismatch can allow an attacker to redirect legitimate URLs to malicious sites. The vulnerability is described in NVD with a base...