10089 matches found
CVE-2003-0432
Ethereal (WinZip packet analyzer) 0.9.12 and earlier is affected by multiple string-handling weaknesses in several dissectors (BGP, WTP, DNS, 802.11, ISAKMP, WSP, CLNP, ISIS, RMI). The CVE-2003-0432 issue arises from improper handling of certain strings, contributing to potential memory consumpti...
CVE-2003-0359
CVE-2003-0359 affects nethack 3.4.0 and earlier, where certain setgid binaries have insecure permissions. This enables a local user to gain privileges by replacing the original binaries with malicious code. The description and related advisories in the connected data confirm the root cause is imp...
CVE-2003-0432
Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the 1 BGP, 2 WTP, 3 DNS, 4 802.11, 5 ISAKMP, 6 WSP, 7 CLNP, 8 ISIS, and 9 RMI dissectors...
CVE-2003-0379
CVE-2003-0379 concerns Apple File Service (AFP Server) on Mac OS X Server. When sharing files on a UFS or re‑shared NFS volume, remote attackers could overwrite arbitrary files. The description and public records (NVD) indicate a remote, unauthenticated access vector with low attack complexity, r...
CVE-2003-0431
The CVE-2003-0431 issue affects Ethereal up to version 0.9.12, where tvb_get_nstringz0 did not correctly handle a zero-length buffer size. This could lead to memory issues, crashes, or, per Red Hat advisories, remote-exploitation risk via crafted input. Mitigation: upgrade to Ethereal 0.9.13 or l...
CVE-2003-0434
Vulnerability CVE-2003-0434 affects multiple PDF viewers, notably Adobe Acrobat 5.0 and Xpdf 1.01. The issue arises from shell metacharacters in embedded hyperlinks, allowing remote attackers to execute arbitrary commands when a user opens a specially crafted PDF. Impact is described as remote co...
CVE-2003-0429
The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow...
CVE-2003-0434
Various PDF viewers including 1 Adobe Acrobat 5.06 and 2 Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink...
CVE-2003-0366
CVE-2003-0366 affects lyskom-server 2.0.7 and earlier. The vulnerability allows unauthenticated users to trigger a denial of service by submitting a large query, causing CPU consumption. Debian and Red Hat advisories (DSA-318-1; RH CVE-2003-0366) indicate that the remote host is missing a securit...
CVE-2003-0428
CVE-2003-0428 involves an unknown vulnerability in the DCERPC (DCE/RPC) dissector of Ethereal 0.9.12 and earlier. The issue allows remote attackers to cause a denial of service via memory consumption when decoding a crafted NDR string. Public sources describe the vulnerability across multiple adv...
CVE-2003-0433
CVE-2003-0433 affects gnocatan 0.6.1 and earlier. Multiple buffer overflows in the server could allow an attacker to execute arbitrary code, potentially gaining shell access or taking control of the host. Various sources (Debian DSA-315, Red Hat advisory, OpenVAS plugin, and GNOCATAN/NASL entries...
CVE-2003-0429
The CVE-2003-0429 issue affects Ethereal (OSI dissector) versions up to 0.9.12. The vulnerability arises from invalid IPv4/IPv6 prefix lengths, which can cause a buffer overflow, enabling remote attackers to potentially crash Ethereal or execute arbitrary code. Public references indicate fixes ar...
CVE-2003-0434
Various PDF viewers including 1 Adobe Acrobat 5.06 and 2 Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink...
CVE-2003-0419
CVE-2003-0419 affects SMC Networks’ Barricade Wireless Cable/DSL Broadband Router, model SMC7004VWBR. The vulnerability allows a remote attacker to crash the device by sending a specially formatted series of packets to TCP/ PPTP port 1723 on the internal interface, rendering the router unresponsi...
CVE-2003-0435
CVE-2003-0435 describes a buffer overflow in net_swapscore in typespeed
CVE-2003-0430
CVE-2003-0430 concerns Ethereal (Wireshark) 0.9.12 and earlier, where the SPNEGO dissector is vulnerable to processing an invalid ASN.1 value. This can allow remote attackers to cause a denial of service (crash). The affected component is the SPNEGO dissector within Ethereal’s protocol analyzer. ...
CVE-2003-0388
pamwheel in Linux-PAM 0.78, with the trust option enabled and the useuid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin to return a spoofed user name...
CVE-2003-0430
The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service crash via an invalid ASN.1 value...
CVE-2003-0388
pamwheel in Linux-PAM 0.78, with the trust option enabled and the useuid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin to return a spoofed user name...