10089 matches found
CVE-2003-0567
Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service traffic block by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full...
CVE-2003-0421
Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service crash via an MS-DOS device name e.g. AUX in a request to HTTP port 1220, a different vulnerability than CVE-2003-0502...
CVE-2003-0502
Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service crash via a .. dot dot sequence followed by an MS-DOS device name e.g. AUX in a request to HTTP port 1220, a different vulnerability than CVE-2003-0421...
CVE-2003-0462
A race condition in the way envstart and envend pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service crash...
CVE-2003-0596
FDclone 2.00a and all pre-2.02a versions are affected. The vulnerability arises from creating temporary workspaces in /tmp with predictable names and reusing them if the directory already exists, allowing local users to read or modify other users’ files by pre-creating the directory. Impact is li...
CVE-2003-0232
Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls LPC port that leads to a buffer overflow...
CVE-2003-0597
Unknown vulnerability in display of Merge before 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges...
CVE-2003-0582
CVE-2003-0582 is rejected/not used; reference CVE-2003-0504 instead.
CVE-2003-0461
CVE-2003-0461 affects the Linux kernel 2.4.x family. The /proc/tty/driver/serial interface exposes the exact number of characters used in serial links, which could allow local users to infer sensitive information such as password lengths. Public advisories confirm fixes via kernel updates or acce...
CVE-2003-0421
CVE-2003-0421 and CVE-2003-0502 affect Apple Darwin Streaming Server / QuickTime prior to the cited fixed versions by allowing remote denial of service via an MS-DOS device name (e.g., AUX) over HTTP on port 1220. Details in the sources show that exploiting names like AUX (and variants like ..AUX...
CVE-2003-0595
WiTango Application Server and Tango 2000 are affected by a buffer overflow that can be triggered by a long cookie targeting the Witango_UserReference field, allowing remote execution of arbitrary code. The vulnerability is confirmed across multiple sources (NVD, Red Hat CVE, CVE.org), which desc...
CVE-2003-0551
The CVE-2003-0551 entry concerns the STP protocol in Linux 2.4.x. According to the sources, STP input processing did not properly verify certain lengths, which could allow attackers to cause a denial of service. Public documents reference Red Hat RHSA-2003:239 and Debian DSA advisories (DSA-423-1...
CVE-2003-0426
The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator...
CVE-2003-0346
CVE-2003-0346, CAN CAN-2003-0346 is tied to a heap-based overflow in the Microsoft DirectX QUARTZ.DLL MIDI handling. A specially crafted MIDI file that sets an oversized Text/Copyright string or an excessive number of MThd tracks can trigger integer overflow, heap corruption, and arbitrary code e...
CVE-2003-0562
Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denial of service ABEND via a long input string...
CVE-2003-0425
Apple QuickTime/Darwin Streaming Server before 4.1.3f (Win32) is vulnerable to Web Root Traversal and Arbitrary File Disclosure via HTTP requests containing three dots to break out of the web root (e.g., /.../qtusers). The issue affects Darwin Streaming Server v4.1.3e and earlier (Win32). Fixed: ...
CVE-2003-0550
CVE-2003-0550 concerns the STP support in Linux kernel 2.4.x. The vulnerability stems from the STP protocol implementation failing to provide adequate security, enabling attackers to modify the bridge topology. Public documents in the connected set confirm this issue across multiple advisories (e...
CVE-2003-0562
NetWare NetWare Enterprise Web Server 5.1/6.0 is vulnerable via the CGI2PERL.NLM PERL handler. A buffer overflow can be triggered by a long URL to /perl/, crashing the server (ABEND) and potentially allowing arbitrary code execution. Public sources describe vulnerable products as NetWare 5.1 SP6 ...
CVE-2003-0525
The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service crash via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string t...