CVE-2003-0640

BEA WebLogic Server and Express are affected when NodeManager is used to start servers. Operator users can overwrite usernames and passwords, which may enable escalation to Admin privileges. The available documents confirm this description but do not specify affected versions or concrete exploit ...

CVE-2003-0638

This CVE (CVE-2003-0638) affects Novell iChain 2.1 prior to Field Patch 3 and iChain 2.2 prior to Field Patch 1a. The vulnerability consists of multiple buffer overflows that can cause a denial of service (ABEND) and may allow arbitrary code execution. Exploitation is described as possible via (1...

CVE-2003-0631

VMware GSX Server 2.5.1 build 4968 and earlier, and Workstation 4.0 and earlier, allows local users to gain root privileges via certain enivronment variables that are used when launching a virtual machine session...

CVE-2003-0575

Heap-based buffer overflow in the name services daemon nsd in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUTHUNIX gid list...

CVE-2003-0149

Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters...

CVE-2003-0610

Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request...

CVE-2003-0616

CVE-2003-0616 is a format-string vulnerability in the McAfee ePolicy Orchestrator (ePO) server, affecting versions 2.0, 2.5, and 2.5.1. The issue resides in the ComputerList parameter where a POST request containing format specifiers is logged when a name resolution fails, potentially enabling re...

CVE-2003-0611

CVE-2003-0611 affects xtokkaetama 1.0. The vulnerability stems from two buffer overflows in the program when handling the -display command line option and the XTOKKAETAMADIR environment variable. This local exploit could allow an attacker to gain privileges (gid 'games'). The CVSS base score is 4...

CVE-2003-0610

The CVE-2003-0610 entry describes a directory traversal vulnerability in the ePO agent of McAfee ePolicy Orchestrator 3.0. Affected component: ePO agent; vulnerability arises from improper handling of HTTP requests, enabling a remote attacker to read arbitrary files on the host. Impact is partial...

CVE-2003-0616

Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution...

CVE-2003-0466

CVE-2003-0466 affects wu-ftpd: an off-by-one bug in fb_realpath() can trigger a buffer overflow, potentially enabling a remote attacker to execute code and obtain root privileges on affected wu-ftpd versions (up to 2.6.2). The issue is demonstrated via pathnames of length MAXPATHLEN+1 and FTP com...

CVE-2003-0625

xfstt (Debian Woody stable) is affected by CVE-2003-0625 due to an off-by-one error that can allow remote attackers to read memory from the xfstt process during the connection handshake. The issue, part of CAN-2003-0625 alongside CAN-2003-0581, enables memory leakage that could aid fingerprinting...

CVE-2003-0609

Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long LDPRELOAD environment variable...

CVE-2003-0575

The IRIX nsd (name services daemon) vulnerability CVE-2003-0575 is a heap-based buffer overflow in the RPC AUTH_UNIX handling of nsd on IRIX 6.5.x (through 6.5.21f, possibly earlier). An attacker could trigger a buffer overflow by sending a crafted UDP AUTH_UNIX packet, potentially gaining root a...

CVE-2003-0625

Removed by vendor...

CVE-2003-0611

Multiple buffer overflows in xtokkaetama 1.0 allow local users to gain privileges via a long 1 -display command line argument or 2 XTOKKAETAMADIR environment variable...

CVE-2003-0615

Technical details for CVE-2003-0615 are not publicly available in the provided documents. Monitor for updates.

CVE-2003-0466

Off-by-one error in the fbrealpath function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including 1 STOR, 2 RETR,...

CVE-2003-0614

CVE-2003-0614 is a cross-site scripting (XSS) vulnerability in Gallery (web-based photo album) affecting Gallery 1.1 through 1.3.4. The vulnerability resides in search.php, where unsanitized input from the searchstring parameter can be exploited to inject arbitrary JavaScript into a victim’s brow...

CVE-2003-0619

The CVE-2003-0619 issue is an Integer signedness error in the decode_fh function of nfs3xdr.c in the Linux kernel prior to 2.4.21. Remote attackers could trigger a denial of service (kernel panic) by supplying a negative size value within XDR data of an NFSv3 procedure call. Public references not...