CVE-2003-0396

The CVE-2003-0396 issue affects linux-atm (ATM stack) prior to version 2.4.1. A buffer overflow in the les module/feature, exploitable when the binary is setuid, allows a local user to gain privileges by passing a long -f argument. Impact is local privilege escalation with partial confidentiality...

CVE-2003-0390

Multiple buffer overflows in Options Parsing Tool OPT shared library 3.18 and earlier, when used in setuid programs, may allow local users to execute arbitrary code via long command line options that are fed into macros such as optwarn2, as used in functions such as optatoi...

CVE-2003-0367

znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2003-0391

The CVE-2003-0391 entry describes a format-string vulnerability in Magic WinMail Server 2.3 (and possibly other 2.x versions) that allows remote attackers to crash the service and potentially execute arbitrary code via format specifiers processed in the PASS/USER flow. The weakness occurs when ha...

CVE-2003-0391

Format string vulnerability in Magic WinMail Server 2.3, and possibly other 2.x versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in the PASS command...

CVE-2003-0386

OpenSSH CVE-2003-0386 affects OpenSSH 3.6.1 and earlier. When host access is restricted by numeric IPs and VerifyReverseMapping is disabled, remote attackers can bypass restrictive from= and user@host checks if the reverse DNS hostname contains the numeric IP. Practical impact per the entry is pa...

CVE-2003-0382

Buffer overflow in Eterm 0.9.2 allows local users to gain privileges via a long ETERMPATH environment variable...

CVE-2003-0396

Buffer overflow in les for ATM on Linux linux-atm before 2.4.1, if used setuid, allows local users to gain privileges via a long -f command line argument...

CVE-2003-0367

znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2003-0380

The CVE-2003-0380 entry corresponds to a buffer overflow in the atftp daemon (atftpd) versions 0.6.1 and earlier (potentially later) that can be triggered by a long filename. This leads to remote denial of service (crash) and may allow arbitrary code execution. Public sources in the connected doc...

CVE-2003-0393

Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Internet Traffic" modes, which allows remote attackers to identify running services via FIN scans or Xmas scans...

CVE-2003-0367

CVE-2003-0367 concerns the gzip package, where the secondary scripts (gzexe, zdiff, znew) allow local users to overwrite arbitrary files via a symlink attack on temporary files. The issue is attributed to insecure temporary-file handling in these scripts, as noted in related advisories and CVE en...

CVE-2003-0385

Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option...

CVE-2003-0386

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address...

CVE-2003-0395

Ultimate PHP Board UPB 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes adminiplog.php...

CVE-2003-0382

CVE-2003-0382 affects eterm 0.9.2 and describes a buffer overflow triggered by a long ETERMPATH environment variable, allowing local privilege escalation. The connected documents corroborate a Debian advisory (DSA-309-1) and OpenVAS entries noting that the remote host is missing a security update...

CVE-2003-0385

Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option...

CVE-2003-0188

lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories...

CVE-2003-0224

Buffer overflow in ssinc.dll for Microsoft Internet Information Services IIS 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include SSI directive with a long filename, aka "Server Side Include Web Pages Buffer Overrun."...

CVE-2003-0226

Microsoft Internet Information Services IIS 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a 1 PROPFIND or 2 SEARCH method, which generates an error condition that is not properly handled...