CVE-2003-0254

CVE-2003-0254 affects Apache 2.x before 2.0.47. When running on an IPv6 host, the FTP proxy component may fail to create an IPv6 socket, triggering a Denial of Service via an infinite loop. Public advisories reference Apache HTTP Server vulnerabilities and note this can be exploited by remote act...

CVE-2003-0496

Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xpfileexist extended stored procedure with a named pipe as an argument instead of a normal file...

CVE-2003-0518

Summary (CVE-2003-0518): The MacOS X screen saver is affected. A local attacker with physical access can trigger a crash and possibly access the underlying session by supplying a very large password field, implying a buffer overflow in password handling. The description identifies the affected co...

CVE-2003-0536

CVE-2003-0536 affects phpSysInfo 2.1 and earlier. The vulnerability is a directory traversal in templates or the lng parameter, allowing reading of arbitrary files by a user with write access to a local directory, or causing a denial of service via dot-dot sequences. The CVSS base score reported ...

CVE-2003-0517

The vulnerability CVE-2003-0517 affects mgetty 1.1.28 and earlier, via the faxrunqd.in component. A symlink attack on JOB files allows local users to overwrite files, compromising file integrity. The issue stems from insufficient protections around JOB file handling, enabling local privilege-impa...

CVE-2003-0516

CVE-2003-0516 affects cnd.c in mgetty 1.1.28 and earlier, where non‑printable characters and quotes are not properly filtered. This may allow remote attackers to execute arbitrary commands via shell metacharacters in the caller ID or caller name strings. Affected product: mgetty (1.1.28 and earli...

CVE-2003-0519

CVE-2003-0519 refers to certain versions of Internet Explorer 5 and 6 on Windows that can be remotely triggered to freeze (DoS) by accessing a URL pointing to the MS-DOS device name C:\aux (and possibly other devices). The available sources confirm a denial-of-service impact when a crafted URL is...

CVE-2003-0345

The CVE-2003-0345 issue affects Microsoft Windows SMB/CIFS implementations (Windows XP, 2000, NT). The root cause is a buffer overflow in the SMB packet handling where an incoming packet specifies a smaller buffer length than required, enabling a remote attacker to cause a denial of service and, ...

CVE-2003-0538

The mailcap configuration in mozart 1.2.5 and earlier causes Oz applications to be passed to the Oz interpreter, allowing remote attackers to execute arbitrary Oz programs in a MIME-aware client. Impact is arbitrary code execution under the user running the MIME client; affected: mozart with mail...

CVE-2003-0496

CVE-2003-0496: Affected software is Microsoft SQL Server on Windows 2000 prior to SP4. By passing a named pipe as an argument to xp_fileexist, a local attacker can impersonate the SQL Server service account due to CreateFile/Named Pipe behavior. Impact is local privilege escalation to the SQL Ser...

CVE-2003-0523

Cross-site scripting XSS vulnerability in msg.asp for certain versions of ProductCart allow remote attackers to execute arbitrary web script via the message parameter...

CVE-2003-0536

Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service via .. dot dot sequences in the 1 template or 2 lng parameters...

CVE-2003-0520

Trillian 1.0 Pro and 0.74 Freeware allows remote attackers to cause a denial of service crash via a TypingUser message in which the "TypingUser" string has been modified...

CVE-2003-0539

CVE-2003-0539 affects skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package based on skk. The issue: insecure temporary file creation allows a local attacker to overwrite arbitrary files. Impact is local, with partial confidentiality/integrity/availability concerns...

CVE-2003-0523

CVE-2003-0523 documents a cross-site scripting (XSS) vulnerability in ProductCart’s msg.asp for certain versions, allowing an attacker to trigger script execution through the message parameter. The core issue is an XSS flaw in the ASP component, as described by the CVE entry and supported by rela...

CVE-2003-0516

cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in 1 caller ID or 2 caller name strings...

CVE-2003-0517

faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files...

[SECURITY] [DSA-337-1] New semi, wemi packages fix insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 337-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 6th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-339-1] New semi, wemi packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 339-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 6th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0498

CVE-2003-0498 affects InterSystems Caché Database 5.x. The vulnerability arises because /cachesys/csp is installed with insecure permissions, allowing local attackers to add server-side scripts or modify files that run with root privileges, enabling arbitrary code execution. The issue is document...