CVE-2003-0338

Directory traversal vulnerability in WsMp3 daemon WsMp3d 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. dot dot sequences in HTTP GET or POST requests...

CVE-2003-0341

The CVE-2003-0341 entry describes an XSS vulnerability in Owl Intranet Engine, affecting version 0.71 and earlier. The issue allows remote attackers to inject arbitrary script through the Search field, with impact aligning to partial confidentiality, integrity, and availability (per CVSS 2.0 vect...

CVE-2003-0339

CVE-2003-0339 affects the WsMp3 daemon (WsMp3d) 0.0.10 and earlier. The vulnerability consists of multiple heap-based buffer overflows in handling long HTTP requests, enabling remote code execution. According to NVD metrics, it is a NETWORK, LOW-attack complexity, NO authentication requirement vu...

CVE-2003-0337

The ckconfig command in lsadmin for Load Sharing Facility LSF 5.1 allows local users to execute arbitrary programs by modifying the LSFENVDIR environment variable to reference an alternate lsf.conf file, then modifying LSFSERVERDIR to point to a malicious lim program, which lsadmin then executes...

CVE-2003-0317

The CVE-2003-0317 issue affects iisPROTECT 2.1 and 2.2, where a remote attacker can bypass authentication by sending URL-encoded (including hex-encoded) HTTP requests. The root cause is a failure to recognize basic URL encoding, enabling access to protected pages/directories. Documented impact is...

CVE-2003-0343

BlackMoon FTP Server 2.6 Free Edition (and possibly other versions) returns an "Account does not exist" message when an invalid username is provided, enabling an attacker to enumerate valid accounts and, as a consequence, facilitate brute‑force login attempts. The Nessus plugin confirms the enume...

CVE-2003-0342

BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, which can allow local users to gain privileges...

CVE-2003-0335

Slackware 9.0’s rc.M invokes quotacheck with the -M option, causing the filesystem to be remounted and potentially resetting security-related mount flags such as nosuid, nodev, and noexec. Root cause: rc.M behavior triggers a remount via quotacheck. Impact stated: possible changes to mount flags ...

CVE-2003-0340

CVE-2003-0340 affects Demarc Puresecure 1.6, where authentication data for the logging server is stored in plaintext. This plaintext storage enables an attacker to obtain login names and passwords, enabling privilege escalation. The available sources confirm the impact but do not provide patch de...

CVE-2003-0335

rc.M in Slackware 9.0 calls quotacheck with the -M option, which causes the filesystem to be remounted and possibly reset security-relevant mount flags such as nosuid, nodev, and noexec...

CVE-2003-0333

CVE-2003-0333 describes multiple buffer overflows in HP-UX Kermit (C-Kermit 6.0.192 and possibly earlier than 8.0) affecting HP-UX 10.20 and 11.00. Local users can gain privileges via excessively long arguments to (1) ask, (2) askq, (3) define, (4) assign, and (5) getc), with some invocations pot...

CVE-2003-0339

Multiple heap-based buffer overflows in WsMp3 daemon WsMp3d 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HTTP requests...

CVE-2003-0343

BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid username is entered, which makes it easier for remote attackers to conduct brute force attacks...

CVE-2003-0334

BitchX IRC client 1.0c20cvs and earlier allows attackers to cause a denial of service core dump via certain channel mode changes that are not properly handled in names.c...

CVE-2003-0336

Qualcomm Eudora 5.2.1 is affected by CVE-2003-0336. A remote attacker can read arbitrary files by sending an email message that contains a carriage return (CR) in a spoofed "Attachment Converted:" string, which is not properly handled by Eudora. This represents a file-read vulnerability via craft...

CVE-2003-0336

Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a carriage return CR character in a spoofed "Attachment Converted:" string, which is not properly handled by Eudora...

CVE-2003-0334

The CVE-2003-0334 issue affects BitchX IRC client versions 1.0c20cvs and earlier. A DoS (core dump) can be triggered by certain channel mode changes that are not properly handled in names.c. The Mandrake advisory notes the vulnerability was fixed in CVS and patched in released updates. Practicall...

CVE-2003-0318

The CVE-2003-0318 entry describes a Cross-site Scripting (XSS) vulnerability in the Statistics module of PHP-Nuke 6.0 and earlier. An attacker could inject arbitrary script via the year parameter, affecting PHP-Nuke’s Statistics component. The NVD entry lists a base score of 4.3 (Medium) with I:P...

CVE-2003-0325

Buffer overflow in Maelstrom 3.0.6, 3.0.5, and earlier allows local users to execute arbitrary code via a long -server command line argument...

CVE-2003-0320

header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcmsuseradmin parameter to "1" and modifying the adminroot parameter to point to a URL that contains a Trojan horse header.inc.php script...