10089 matches found
CVE-2003-0189
The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the cryptr or crypt functions, which allows remote attackers to cause a denial of service failed Basic authentication with valid usernames and passwords when a threaded MPM is use...
CVE-2003-0356
Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 AIM, 2 GIOP Gryphon, 3 OSPF, 4 PPTP, 5 Quake, 6 Quake2, 7 Quake3, 8 Rsync, 9 SMB, 10 SMPP, and 11 TSP dissectors, which do not...
CVE-2003-0223
Microsoft IIS 4.0/5.0/5.1 is affected by a cross-site scripting (XSS) vulnerability in the ASP redirection function that allows remote attackers to embed script in a redirection URL/message. The issue is identified as CVE-2003-0223 (MS03-018), with a patch referenced as Microsoft security bulleti...
CVE-2003-0224
CVE-2003-0224 describes a buffer overflow in IIS 5.0 (ssinc.dll) triggered by a Server Side Include directive with an overly long filename, potentially allowing local users to execute arbitrary code. Affected IIS versions mentioned in connected materials include IIS 4.0, 5.0, and 5.1; exploitatio...
CVE-2003-0355
Safari 1.0 Beta 2 (v73) and earlier are described as not validating the Common Name (CN) field in X.509 certificates, which could allow remote attackers to spoof certificates. The connected documents do not add concrete technical details such as affected components beyond the browser version, roo...
CVE-2003-0245
CVE-2003-0245 concerns a vulnerability in the APR library (apr_psprintf) used by Apache 2.0.x, reported for versions 2.0.37–2.0.45. The flaw can crash the server and, in some cases, enable arbitrary code execution when triggered by long strings (notably via mod_dav) and potentially other vectors....
CVE-2003-0361
gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp...
CVE-2003-0189
CVE-2003-0189 detail (from connected documents): The Apache HTTP Server 2.0.40–2.0.45 on Unix platforms fails to handle thread safety in the apr_password_validate() path when crypt_r/crypt is used, enabling remote attackers to trigger a denial-of-service by breaking Basic Authentication under a t...
CVE-2003-0226
CVE-2003-0226 : Microsoft IIS 5.0 and 5.1 are affected by a WebDAV-based denial-of-service when processing excessively long PROPFIND or SEARCH requests, leading to an error condition that IIS does not handle properly. The OpenVAS/NESSUS inputs reference MS03-018 (Cumulative Patch for IIS) as the ...
CVE-2003-0360
CVE-2003-0360 corresponds to multiple buffer overflow vulnerabilities in gPS prior to 1.0.0, enabling denial of service and possibly arbitrary code execution. Debian DSA-307 notes that gps versions around 1.1.0 fixed these issues (and related protocol/buffer bugs). Affected component: the gps gra...
CVE-2003-0241
FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it untrusted, which allows remote attackers to execute arbitrary code via a message that is rendered in IE using a less secure zone...
CVE-2003-0225
The ASP function Response.AddHeader in Microsoft Internet Information Server IIS 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service memory consumption with an ASP page...
CVE-2003-0357
The CVE-2003-0357 issue affects Ethereal 0.9.11 and earlier, with multiple integer overflow vulnerabilities in the Mount and PPP dissectors that could enable a remote attacker to corrupt memory and cause or contribute to a crash. Public advisories (e.g., Red Hat RHSA-2003:077) indicate updated Et...
CVE-2003-0240
CVE-2003-0240 describes an Axis Network Camera vulnerability where authentication to the admin interface can be bypassed by requesting http://camera-ip//admin/admin.shtml (double slash). This allows remote attackers to bypass restrictions and modify configuration, potentially enabling root access...
CVE-2003-0245
Vulnerability in the aprpsprintf function in the Apache Portable Runtime APR library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via long strings, as demonstrated using XML objects to moddav, and possibly other...
CVE-2003-0241
The CVE-2003-0241 issue affects FrontRange GoldMine mail agent, specifically versions 5.70 and 6.00 prior to build 30503. The vulnerability arises when HTML is sent to the default browser without labeling the content as untrusted or setting a secure zone, causing IE to render HTML in a less secur...
CVE-2003-0227
Microsoft Windows Media Services ISAPI extension (nsiislog.dll) handling unicast/multicast logging on Windows NT 4.0/2000 is vulnerable. A remote attacker can cause IIS denial of service and execute arbitrary code via a crafted network request. OpenVAS notes active code execution vulnerabilities;...
CVE-2003-0227
The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server IIS and execute arbitrary code via a...
CVE-2003-0361
The CVE-2003-0361 issue affects gPS prior to version 1.1.0, where rgpsp connection source acceptation policy was not correctly enforced by /etc/rgpsp.conf, potentially allowing unauthorized remote hosts to connect to rgpsp. Public sources (NVD entry) describe the vulnerability, and Debian OpenVAS...
