CVE-2003-0478

Format string vulnerability in 1 Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including 2 digatech 1.2.1, 3 methane 0.1.1, 4 AndromedeIRCd 1.2.3-Release, and 5 ircd-RU, when running in debug mode, allows remote attackers to cause a denial of service and possibly execute...

CVE-2003-0490

The CVE-2003-0490 issue affects Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6 (and possibly other versions). The root cause is that installation creates critical directories and files with world-writable permissions, enabling local users to substitute legitimate programs with malicious ones t...

CVE-2003-0438

eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...

CVE-2003-0478

CVE-2003-0478 affects Bahamut IRCd 1.4.35 and earlier and related IRC daemons based on Bahamut (digatech 1.2.1, methane 0.1.1, AndromedeIRCd 1.2.3-Release, ircd-RU) when running in debug mode. The root cause is a format-string vulnerability in handling requests that permits remote attackers to ca...

CVE-2003-0485

Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, invalid data type...

CVE-2003-0473

Technical details for CVE-2003-0473 are not publicly available in the provided documents. No product, vector, impact, or patch information is listed. Monitor for official updates.

CVE-2003-0481

Multiple cross-site scripting XSS vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated using the msg parameter to fileselect.php...

CVE-2003-0491

The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file...

CVE-2003-0495

Cross-site scripting XSS vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item...

CVE-2003-0471

Alt-N WebAdmin is affected by a remote buffer overflow in the USER parameter of WebAdmin.exe/WebAdmin.dll, enabling arbitrary code execution as described in CVE-2003-0471. Public artifacts include references in Exploit-DB and Metasploit modules showing a buffer overflow condition that could allow...

CVE-2003-0487

Kerio MailServer 5.6.3 is affected by multiple buffer-overflow flaws that can be triggered by overly long parameters in specific modules (showuser in do_subscribe; folder in add_acl and list; user in do_map). These vulnerabilities allow remote authenticated users to cause a denial of service and,...

CVE-2003-0495

The CVE-2003-0495 entry concerns LedNews 0.7 with a cross-site scripting (XSS) flaw that lets an attacker inject arbitrary web script via a news item. The vulnerability is described as enabling the execution of malicious HTML/JavaScript in victims’ browsers, potentially enabling cookie theft or o...

CVE-2003-0489

tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute...

wzdftpd remote DoS

Title: wzdftpd remote DoS Affected: wzdftpd = 0.1rc4 URL: http://www.wzdftpd.net Risk: High Exploitable: Yes Remote: Yes Date: June, 27 2003 Overview: "A portable, modular and efficient ftp server, supporting SSL, winsock, multithreaded, modules ,externals scripts. unix-like permissions+acls,...

CVE-2003-0452

The CVE-2003-0452 issue affects the Operator Shell (OSH) up to version 1.7-11. A buffer overflow in OSH can be triggered by long environment variables or lengthy file redirections, enabling a local attacker to execute arbitrary code and bypass the shell’s restrictions. Public sources (including D...

CVE-2003-0451

CVE-2003-0451 involves multiple buffer overflows in the xbl game before version 1.0k that can be triggered by long command line arguments, enabling local privilege escalation to gid 'games'. The primary public details state the issue and the exploit target; Debian/Red Hat/SUSE advisories referenc...

CVE-2003-0445

CVE-2003-0445 describes a buffer overflow in the webfs HTTP server (pre-1.17.1). The affected product is webfs, a lightweight HTTP server for static content. The underlying issue is a buffer overflow triggered by a long HTTP Request-URI, which could allow a remote attacker to execute arbitrary co...

CVE-2003-0453

CVE-2003-0453 relates to traceroute-nanog. A memory allocation overflow bug (integer overflow) in certain nprobes/max_ttl inputs can cause a buffer overflow, potentially enabling arbitrary code execution by a local user. Public disclosures reference the Debian DSA-348 advisory which fixes the iss...

CVE-2003-0453

traceroute-nanog 6.1.1 allows local users to overwrite unauthorized memory and possibly execute arbitrary code via certain "nprobes" and "maxttl" arguments that cause an integer overflow that is used when allocating memory, which leads to a buffer overflow...

CVE-2003-0448

Portmon 1.7 (and possibly earlier) contains a local-file-access vulnerability that allows local users to read and write arbitrary files via the command line options -c (host file) or -l (log file). The issue impacts confidentiality and integrity (partial) and requires local access; exploitation d...