CVE-2003-0253

CVE-2003-0253 affects Apache 2.x with the prefork MPM before 2.0.47. A bug in handling accept() errors on rarely accessed ports could cause a temporary denial of service. The available connected documents consistently describe this as a DoS issue tied to the prefork MPM; remediation involves upgr...

CVE-2003-0539

skk Simple Kana to Kanji conversion program 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files...

CVE-2003-0517

faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files...

CVE-2003-0254

Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service CPU consumption by infinite loop when the FTP proxy server fails to create an IPv6 socket...

CVE-2003-0440

CVE-2003-0440 concerns the semi MIME library and its fork wemi, where insecure temporary-file handling allows a local attacker to overwrite arbitrary files via a symlink attack. Public sources (NVD entry) cite semi up to version 1.14.5 and wemi up to 1.14.0 as vulnerable; Debian, Red Hat, and Ope...

CVE-2003-0524

CVE-2003-0524 affects Knoppix 3.1 Live CD running Qt. A local attacker can exploit a symlink in the temporary file qt_plugins_3.0rc within the ~/.qt directory to overwrite arbitrary files. Root cause is a symlink vulnerability in the qt_plugins_3.0rc temp file handling. Impact is local confidenti...

CVE-2003-0535

CVE-2003-0535 is a local privilege-escalation vulnerability in the xbl package (version 1.0k and earlier) caused by a buffer overflow triggered by a long -display command line option. Reports (notably Debian DSA-345) describe local attackers gaining gid 'games' privileges. Debian fixed the issue ...

CVE-2003-0516

cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in 1 caller ID or 2 caller name strings...

CVE-2003-0515

The CVE-2003-0515 issue affects teapop (POP-3 server) up to version 0.3.5, where the PostgreSQL and MySQL authentication modules do not properly escape user input in SQL queries. This root cause allows an attacker to execute arbitrary SQL under the database user’s privileges, potentially leading ...

CVE-2003-0192

CVE-2003-0192 describes an issue in Apache 2.x before 2.0.47 (and mod_ssl for Apache 1.3) where certain sequences of per-directory renegotiations combined with using SSLCipherSuite to upgrade a weak cipher could cause the server to continue using a weak cipher. The connected advisories confirm af...

CVE-2003-0536

Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service via .. dot dot sequences in the 1 template or 2 lng parameters...

CVE-2003-0254

Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service CPU consumption by infinite loop when the FTP proxy server fails to create an IPv6 socket...

CVE-2003-0539

skk Simple Kana to Kanji conversion program 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files...

CVE-2003-0440

The 1 semi MIME library 1.14.5 and earlier, and 2 wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2003-0350

The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 ListView does not properly handle Windows messages, which allows local users to execute arbitrary code via a "Shatter" style message to the Utility Manager that references a user-controlled callback...

CVE-2003-0524

Qt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on the qtplugins3.0rc temporary file in the .qt directory...

CVE-2003-0521

CVE-2003-0521 is a documented XSS vulnerability in cPanel 6.4.2 where a URL containing script is logged and displayed in the Error Log or Latest Visitors screens, enabling remote attackers to inject arbitrary HTML and potentially gain privileges. The CVSS vector (AV:N/AC:M/Au:N/C:P/I:P/A:P) yield...

CVE-2003-0520

CVE-2003-0520 affects Trillian 1.0 Pro and 0.74 Freeware. The issue allows remote attackers to trigger a denial of service (crash) by sending a TypingUser message in which the TypingUser string has been modified. The description in the CVE entries consistently states that the crash is caused by t...

CVE-2003-0537

The CVE-2003-0537 entry affects liece, the Emacs IRC client, where the affected versions up to 2.0+0.20030527 create temporary files insecurely. This behavior could allow a local attacker to overwrite arbitrary files as the running user. The provided documents specify the vulnerability as insecur...

CVE-2003-0350

CVE-2003-0350 affects Windows 2000’s Accessibility Utility Manager (ListView). The vulnerability arises from improper handling of Windows messages in the ListView control, enabling a local attacker to cause arbitrary code execution via a malicious Shatter-style message that references a user-cont...