CVE-2003-0242

IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which could allow traffic that is not explicitly allowed by the policies...

CVE-2003-0303

SQL injection vulnerability in one||zero aka One or Zero Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter...

CVE-2003-0307

Poster version.two allows remote authenticated users to gain administrative privileges by appending the "|" field separator and an "admin" value into the email address field...

CVE-2003-0324

Buffer overflows in EPIC IRC Client EPIC4 1.0.1 allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long replies that are not properly handled by the 1 userhostcmdreturned function, or 2 Statusbar capability...

BELL-CVE-2003-0245 CVE-2003-0245 does not affect BellSoft software

Bulletin has no description...

CVE-2003-0245

Vulnerability in the aprpsprintf function in the Apache Portable Runtime APR library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via long strings, as demonstrated using XML objects to moddav, and possibly other...

[SECURITY] [DSA-311-1] New kernel packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 311-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 8th, 2003 http://www.debian.org/security/faq -...

Etherleak information leak in Windows Server 2003 drivers

NGSSoftware Insight Security Research Advisory Name: Etherleak information leak in Windows Server 2003 drivers Systems Affected: Windows Server 2003 all versions Severity: Low/Medium Risk Vendor URL: http://www.microsoft.com/windowsserver2003/ Author: Chris Paget [email protected] Date: 9th...

[SECURITY] [DSA-308-1] New gzip packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 308-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 6th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0376

This CVE concerns Eudora 5.2.1, where a buffer overflow in the Attachment Converted argument with a large sequence of dots can be triggered remotely to cause a denial of service and potentially execute arbitrary code. Affected component: Eudora mail client; root cause: unbounded input handling le...

CVE-2003-0372

Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service core dump and possibly execute arbitrary code by causing a negative argument to be provided to the insstr function as used in a NASL script...

CVE-2003-0378

The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set...

CVE-2003-0371

CVE-2003-0371 describes a buffer overflow in the Prishtina FTP client 1.x. The vulnerability allows a remote FTP server to trigger a denial of service (crash) and potentially execute arbitrary code by delivering a long FTP banner. The public records in the provided documents confirm the affected ...

CVE-2003-0373

CVE-2003-0373 : Multiple buffer overflows in Nessus’ libnasl (pre-2.0.6) allow local users with plugin-upload privileges to trigger a denial of service (core dump) and potentially execute arbitrary code. The vulnerable paths include (1) a long proto argument to scanner_add_port, (2) a long user a...

CVE-2003-0344

Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / slash characters in the Type property of an Object tag in a web page...

CVE-2003-0372

CVE-2003-0372 affects Nessus prior to 2.0.6, specifically the libnasl component. The root cause is a signed integer handling issue that allows a local user with plugin upload privileges to trigger a denial of service (core dump) and potentially execute arbitrary code by providing a negative argum...

CVE-2003-0373

Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a denial of service core dump and possibly execute arbitrary code via 1 a long proto argument to the scanneraddport function, 2 a long user argument to the ftplogin function, 3 a...

CVE-2003-0377

The CVE-2003-0377 entry concerns iisPROTECT (versions 2.2-r4 and earlier) and is triggered by an SQL injection in the web-based administration interface. The root cause is a vulnerability in how certain variables, notably GroupName on SiteAdmin.ASP, are processed, enabling remote attackers to inj...

CVE-2003-0378

The CVE-2003-0378 issue affects Mac OS X when Kerberos login is used with LDAPv3 and LDAP bind authentication; if AuthenticationAuthority is not set, cleartext passwords may be sent to the LDAP server during the authentication fallback. Impact is plaintext password exposure over the network; reme...

CVE-2003-0374

CVE-2003-0374 describes multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, separate from CVE-2003-0372/0373. The connected records provide concrete details for 0372 (signed integer vulnerability in libnasl allowing local privilege escalation and possible c...