CVE-2003-0271

Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument...

CVE-2003-0266

Multiple buffer overflows in SLWebMail 3 on Windows systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a long Language parameter to showlogin.dll, 2 a long CompanyID parameter to recman.dll, 3 a long CompanyID parameter to admin.dll, or 4 a long...

CVE-2003-0272

admin.php in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cookie to an "adminok" value...

CVE-2003-0261

fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges...

CVE-2003-0238

The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service CPU consumption by spoofing the address of an ADS server and sending HTML with a -1 width in a table tag...

CVE-2003-0267

ShowGodLog.dll in SLWebMail 3 on Windows systems allows remote attackers to read arbitrary files by directly calling ShowGodLog.dll with an argument specifying the full path of the target file...

CVE-2003-0264

Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via 1 a long EHLO argument to slmail.exe, 2 a long XTRN argument to slmail.exe, 3 a long string to POPPASSWD, or 4 a long password to the POP3 server...

CVE-2003-0269

Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable...

CVE-2003-0262

leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges, which KATAXWR is not designed to have...

CVE-2003-0265

Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed...

CVE-2003-0236

Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the 1 Subject or 2 Date headers...

CVE-2003-0239

icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF89a headers that do not contain a GCT Global Color Table or an LCT Local Color Table after an Image Descriptor...

CVE-2003-0261

fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges...

CVE-2003-0244

...

BLNews objects.inc.php4 Server[path] Parameter Remote File Inclusion

It is possible to make the remote host include remote PHP files using the BLnews CGI suite. A remote attacker may exploit this to execute arbitrary code with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date: Thu, 22 May 2003 14:42:13 +0400 From: Ove...

CVE-2003-0338

CVE-2003-0338 describes a directory traversal vulnerability in the WsMp3 daemon (WsMp3d) versions up to 0.0.10. The issue allows a remote attacker to read and execute arbitrary files via .. sequences in HTTP GET or POST requests. The vulnerability affects WsMp3d as a web server component that han...

CVE-2003-0317

iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded characters...

CVE-2003-0337

The CVE describes a local code execution in Load Sharing Facility (LSF) 5.1 via the ckconfig command in lsadmin. By manipulating environment variables LSF_ENVDIR to reference an alternate lsf.conf and LSF_SERVERDIR to point to a malicious lim program, a local attacker can cause lsadmin to execute...

CVE-2003-0340

Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, which allows attackers to steal login names and passwords to gain privileges...

CVE-2003-0342

Summary: CVE-2003-0342 affects BlackMoon FTP Server 2.6 Free Edition (and possibly other distributions). Affected component is the blackmoon.mdb database where usernames and passwords are stored in plaintext. The underlying issue enables local users who have an account on the host to read credent...