CVE-2003-0497

CVE-2003-0497 affects InterSystems Caché Database 5.x. The vulnerability arises because /cachesys/bin/cache (and related paths) are installed with world-writable permissions, enabling local attackers to gain privilege by overwriting a cache component and executing it via /cachesys/bin/cuxs. The i...

CVE-2003-0503

The CVE-2003-0503 entry applies to Windows 2000 before SP4, where a buffer overflow in ShellExecute (SHELL32.DLL) can be triggered by a long third argument. This could lead to denial of service or arbitrary code execution. The available documents specify the affected component and the root cause ...

CVE-2003-0506

Microsoft NetMeeting 3.01 2000 before SP4 is affected by a remote DoS vulnerability triggered by malformed packets (demonstrated via chat), per CVE-2003-0506. The affected component is NetMeeting’s chat/packet handling; impact is shutdown of a conference. The connected records do not specify a ve...

CVE-2003-0505

Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "...." dot dot sequences in a file transfer request...

CVE-2003-0508

CVE-2003-0508 affects Adobe Acrobat Reader (acroread) up to version 5.0.7. A buffer overflow in the WWWLaunchNetscape function can be triggered by a PDF containing a long mailto link, enabling remote code execution. This is corroborated by multiple sources (NVD, SUSE, OpenVAS) describing the same...

CVE-2003-0500

Vulnerability: ProFTPD’s PostgreSQL authentication module (mod_sql_postgres) is affected in ProFTPD versions before 1.2.9rc1, due to a SQL injection via the USER name parameter. Impact: remote attackers could bypass authentication or steal passwords and gain privileges by executing arbitrary SQL....

CVE-2003-0501

The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries...

CVE-2003-0510

Format string vulnerability in ezbounce 1.0 through 1.50 allows remote attackers to execute arbitrary code via the "sessions" command...

CVE-2003-0506

Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service shutdown of NetMeeting conference via malformed packets, as demonstrated via the chat conversation...

CVE-2003-0510

CVE-2003-0510 is a format-string vulnerability in ezbounce limited to v1.0–1.50 that lets remote attackers run arbitrary code via the sessions command. The issue is network-accessible with no authentication required (per CVSS data); exploitation is noted in advisories, with some reports of obtain...

CVE-2003-0509

The connected sources confirm a SQL injection vulnerability in Cyberstrong eShop (ASP) affecting version 4.2 and earlier, caused by input validation flaws in the ProductCode parameter used by scripts 10expand.asp, 10browse.asp, and 20review.asp. The OpenVAS/Nessus entries describe remote exploita...

CVE-2003-0507

Summary: CVE-2003-0507 is a stack-based buffer overflow in Microsoft Windows 2000 Active Directory (LSASS.exe) triggered by an LDAP v3 search request with a large number of qualifiers (e.g., multiple AND/OR statements), leading to a denial of service (reboot) and potential arbitrary code executio...

CVE-2003-0503

Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service or execute arbitrary code via a long third argument...

CVE-2003-0505

The provided data confirms a directory traversal vulnerability (CVE-2003-0505) impacting Microsoft NetMeeting 3.01 (2000) prior to SP4. The issue allows remote attackers to read arbitrary files by sending file transfer requests containing .... sequence(s). No explicit exploitation details or in-t...

CVE-2003-0454

CVE-2003-0454 describes multiple buffer overflows in xgalaga (versions 2.0.34 and earlier) that allow a local user to gain privileges by supplying a long HOME environment variable. Debian’s DSA-334 notes the issue and references a security update for xgalaga; related Red Hat and OSV entries confi...

CVE-2003-0499

CVE-2003-0499 affects Mantis 0.17.5 and earlier, where the database password is stored in cleartext in a world-readable configuration file. This permits local users to perform unauthorized database operations due to exposed credentials. Public sources in the connected documents confirm Debian DSA...

CVE-2003-0501

The CVE-2003-0501 issue concerns the Linux /proc filesystem allowing a local attacker to read sensitive information by opening entries in /proc/self before a setuid program runs, potentially preventing proper ownership/permission changes. Connected advisories confirm this can be triggered in Linu...

CVE-2003-0455

CVE-2003-0455 affects ImageMagick libmagick in 5.5 and earlier, where insecure temporary file handling allows a local user to create or overwrite arbitrary files. Connected documents confirm advisories for Debian DSA-331-1 and Red Hat RHSA-2004:494 (ImageMagick updates) that patch this issue. No ...

CVE-2003-0367

znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files...

DEBIAN-CVE-2003-0380

Buffer overflow in atftp daemon atftpd 0.6.1 and earlier, and possibly later versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long filename...