10089 matches found
CVE-2003-0402
CVE-2003-0402 affects Vignette StoryServer 5 and Vignette V/5, where the default login template (/vgn/login) returns different responses depending on whether a user exists. This behavior allows remote attackers to identify valid usernames via brute force, enabling username enumeration. The NVD en...
CVE-2003-0409
CVE-2003-0409 affects BRS WebWeaver (versions 1.04 and earlier). The vulnerability is a buffer overflow triggered by excessively long HTTP POST or HEAD requests, allowing remote attackers to cause a denial of service (crash) and potentially execute arbitrary code. The connected documents (NVD/NVD...
CVE-2003-0407
Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string...
CVE-2003-0398
Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, with the SSI EXEC feature enabled, allows remote attackers to execute arbitrary code via a text variable to a Vignette Application that is later displayed...
CVE-2003-0410
The CVE-2003-0410 entries describe a buffer overflow in AnalogX Proxy 4.13 that could allow remote code execution when a long URL is sent to port 6588. This is supported by the NVD entry (Buffer overflow in AnalogX Proxy 4.13 allows remote attackers to execute arbitrary code via a long URL to por...
CVE-2003-0401
Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn/style template...
CVE-2003-0403
CVE-2003-0403 affects Vignette StoryServer 5 and Vignette V/5. Remote attackers can read and modify license information and cause a denial of service by directly accessing the /vgn/license template. The provided documents do not include root-cause analysis, affected versions beyond the products n...
CVE-2003-0401
Affected software/impact (summary). CVE-2003-0401 affects Vignette StoryServer and Vignette V/5. The vulnerability is describ ed as allowing remote attackers to obtain sensitive information by requesting the /vgn/style template. The NVD entry provides a network-accessible impact with partial conf...
CVE-2003-0406
PalmVNC 1.40 and earlier stores passwords in plaintext in the PalmVNCDB, which is backed up to PCs that the Palm is synchronized with, which could allow attackers to gain privileges...
CVE-2003-0410
Buffer overflow in AnalogX Proxy 4.13 allows remote attackers to execute arbitrary code via a long URL to port 6588...
CVE-2003-0397
CVE-2003-0397 describes a buffer overflow in the FastTrack (FT) network code used by Kazaa 2.0.2 (and possibly other versions) that can be triggered by a specially crafted packet containing a large list of supernodes, allowing remote code execution. The vulnerability affects the FastTrack network...
CVE-2003-0412
Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of long HTTP requests, which could allow remote attackers to hide malicious activities. The available documents do not provide a remediation or explicit exploit details.
CVE-2003-0415
Remote PC Access Server 2.2 allows remote attackers to cause a denial of service crash by receiving packets from the server and sending them back to the server...
CVE-2003-0417
Directory traversal vulnerability in Son hServer 0.2 allows remote attackers to read arbitrary files via ".|." modified dot-dot sequences...
CVE-2003-0393
The CVE-2003-0393 entry concerns Privacyware Privatefirewall 3.0, where the product fails to block certain incoming packets when in Filter Internet Traffic or Deny Internet Traffic modes. This behavior can allow remote attackers to identify running services via FIN scans or Xmas scans. According ...
CVE-2003-0385
CVE-2003-0385: Buffer overflow in xaos 3.0-23 and earlier when running setuid allows local users to gain root privileges via a long -language option. The issue is triggered in setuid context and is confirmed by multiple sources (NVD entry and OSV entries). Debian DSAs (DSA-310) describe the vulne...
CVE-2003-0395
CVE-2003-0395 affects Ultimate PHP Board (UPB) 1.9. A remote attacker can execute arbitrary PHP code with UPB administrator privileges by sending PHP commands in the HTTP User-Agent header; code is executed when the administrator processes admin_iplog.php. The issue is caused by unsafely handling...
CVE-2003-0390
CVE-2003-0390 is a vulnerability in the Options Parsing Tool (OPT) shared library ≤ 3.18 used by setuid programs. It describes multiple buffer overflows triggered by long command line options fed into macros such as opt_warn_2 (used in opt_atoi), enabling local arbitrary code execution. The provi...
CVE-2003-0394
CVE-2003-0394 affects BLNews 2.1.3 where objects.inc.php4 is vulnerable to remote code execution via a Server[path] parameter pointing to attacker-controlled PHP code. The vulnerability enables an attacker to include remote PHP files, executing code with the web server’s privileges. Affected prod...