CVE-2003-0561

CVE-2003-0561 concerns IglooFTP PRO 3.8, where multiple buffer overflows could allow a remote attacker to run arbitrary code. The vulnerability is triggered by oversized inputs in FTP banner responses and in specific commands (USER, PASS, ACCT) as well as possibly other commands. The NVD entry as...

CVE-2003-0554

NeoModus Direct Connect 1.0 build 9 (and possibly other versions) is described as vulnerable to a remote denial-of-service via a flood of ConnectToMe requests containing arbitrary IP addresses and ports. The underlying issue appears in handling ConnectToMe traffic, enabling an attacker to exhaust...

CVE-2003-0553

CVE-2003-0553 describes a buffer overflow in the Client Detection Tool (CDT) plugin (npcdt.dll) for Netscape 7.02. A remote attacker can trigger code execution by a attachment with a long filename. The vulnerability is network-exposed with low exploit complexity and no authentication, with a CVSS...

CVE-2003-0252

Off-by-one error in the xlog function of mountd in the Linux NFS utils package nfs-utils before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines...

CVE-2003-0252

CVE-2003-0252 describes an off-by-one overflow in the xlog() function used by mountd in the Linux nfs-utils package (pre-1.0.4). Exploitation could allow remote attackers to cause a denial of service and potentially execute arbitrary code via certain RPC requests to mountd that do not contain new...

CVE-2003-0555

ImageMagick 5.4.3.x and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via a "%x" filename, possibly triggering a format string vulnerability...

CVE-2003-0456

CVE-2003-0456 concerns VisNetic WebSite 3.5 where a remote attacker can reveal the server’s full pathname via an error message triggered by a request for a non-existent folder (e.g., using _vti_bin/fpcount.exe). This is a path-disclosure vulnerability that exposes sensitive filesystem information...

CVE-2003-0556

Polycom MGC 25 allows remote attackers to cause a denial of service crash via a large number of "user" requests to the control port 5003, as demonstrated using the blast TCP stress tester...

CVE-2003-0465

The CVE-2003-0465 issue affects the Linux kernel (2.4/2.5) where strncpy does not pad with null bytes on architectures other than x86, potentially allowing information leaks. Red Hat’s RHSA-2004:188 and related advisories document this as a kernel vulnerability with fixes in updated kernel packag...

CVE-2003-0456

VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folder that does not exist, which leaks the pathname in an error message, as demonstrated using vtibin/fpcount.exe...

CVE-2003-0556

Polycom MGC 25 is affected by CVE-2003-0556, where a remote attacker can cause a denial of service (crash) by sending a large number of requests to control port 5003, demonstrated with the blast TCP stress tester. The issue is tied to the MGC 25’s handling of control-port requests; no patch/mitig...

CVE-2003-0560

CVE-2003-0560 concerns an SQL injection in VP-ASP’s shopexd.asp. The vulnerability is triggered via the id parameter, enabling remote attackers to gain administrator privileges. The connected documents confirm the issue and its impact (admin privilege escalation via SQL injection), but do not pro...

CVE-2003-0559

The CVE-2003-0559 entry describes a remote PHP code execution vulnerability in phpforum 2 RC-1 (and possibly earlier) where an attacker can set MAIN_PATH to reference a URL containing PHP code on a remote server. This affects phpforum’s mainfile.php; exploitation would allow arbitrary code execut...

CVE-2003-0555

CVE-2003-0555 affects ImageMagick 5.4.3.x and earlier. The vulnerability is triggered by a filename containing a “%x” sequence, potentially causing a crash (denial of service) and possibly allowing arbitrary code execution through a format string vulnerability. The available sources confirm the a...

CVE-2003-0554

NeoModus Direct Connect 1.0 build 9, and possibly other versions, allows remote attackers to cause a denial of service connection and possibly memory exhaustion via a flood of ConnectToMe requests containing arbitrary IP addresses and ports...

CVE-2003-0252

Off-by-one error in the xlog function of mountd in the Linux NFS utils package nfs-utils before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines...

CVE-2003-0557

CVE-2003-0557 describes an SQL injection vulnerability in login.asp for StoreFront 6.0 (and possibly earlier versions). The issue allows remote attackers to obtain sensitive user information via SQL statements in the password field. Per NVD metrics, the base score is 7.5 (HIGH) with network acces...

CVE-2003-0558

Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request...

[SCSA-019] Gattaca Server 2003 Vulnerable to Multiple vulnerabilities

===================================================================== Security Corporation Security Advisory SCSA-019 Gattaca Server 2003 Vulnerable to Multiple vulnerabilities ===================================================================== PROGRAM: Gattaca Server 2003 HOMEPAGE:...

CVE-2003-0538

The mailcap file for mozart 1.2.5 and earlier causes Oz applications to be passed to the Oz interpreter, which allows remote attackers to execute arbitrary Oz programs in a MIME-aware client program...