10089 matches found
CVE-2003-0330
CVE-2003-0330 affects Maelstrom and is described as a buffer overflow vulnerability in unknown versions that allows a local user to execute arbitrary code through a long -player command line argument. Root cause: buffer overflow in handling a command line argument. Impact: local code execution wi...
CVE-2003-0322
Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service crash...
CVE-2003-0324
Buffer overflows in EPIC IRC Client EPIC4 1.0.1 allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long replies that are not properly handled by the 1 userhostcmdreturned function, or 2 Statusbar capability...
CVE-2003-0321
CVE-2003-0321 affects BitchX IRC client up to version 1.0-0c19 and earlier. The vulnerability stems from multiple buffer overflows in core parsing/handling paths (send_ctcp, cannot_join_channel, cluster, BX_compress_modes, handle_oper_vision, ban_it) when processing long hostnames, nicknames, or ...
CVE-2003-0335
rc.M in Slackware 9.0 calls quotacheck with the -M option, which causes the filesystem to be remounted and possibly reset security-relevant mount flags such as nosuid, nodev, and noexec...
CVE-2003-0339
Multiple heap-based buffer overflows in WsMp3 daemon WsMp3d 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HTTP requests...
CVE-2003-0323
Multiple buffer overflows in ircII 20020912 allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via responses that are not properly fed to the mystrcat function by 1 ctcpbuffer, 2 cannotjoinchannel, 3 statusmakeprintable for Statusbar drawing...
CVE-2003-0330
Buffer overflow in unknown versions of Maelstrom allows local users to execute arbitrary code via a long -player command line argument...
CVE-2003-0323
CVE-2003-0323 affects IRC clients including ircII (20020912 build) and EPIC4. The issue arises from multiple buffer overflows in the code paths used to process protocol replies (e.g., ctcp_buffer, cannot_join_channel, status_make_printable for Statusbar drawing, create_server_list), allowing a re...
CVE-2003-0324
EPIC IRC Client (EPIC4) 1.0.1 is affected by a buffer overflow vulnerability described in CVE-2003-0324. The issue allows a remote malicious IRC server to cause a denial of service (crash) and potentially execute arbitrary code by sending long replies that are not properly handled by the userhost...
CVE-2003-0319
CVE-2003-0319: A buffer overflow in the MailMax IMAP server (MailMax/SmartMax) affects version 5.0.10.8 and earlier. The vulnerability allows remote authenticated users to execute arbitrary code via a long SELECT command. Exploitation details are supported by NVD/Nessus entries. Remediation: upgr...
CVE-2003-0320
CVE-2003-0320 affects ttCMS 2.3 and earlier. The vulnerability allows remote attackers to inject arbitrary PHP code by setting ttcms_user_admin=1 and altering admin_root to point to a URL containing a Trojan horse header.inc.php script. Documented impact indicates possible arbitrary PHP code exec...
CVE-2003-0332
The CVE-2003-0332 vulnerability affects BadBlue ISAPI extension in versions 1.7 through 2.2 (potentially earlier). The issue arises when the ISAPI extension modifies the first two letters of a filename extension after a security check, allowing remote attackers to bypass authentication by using a...
CVE-2003-0337
The ckconfig command in lsadmin for Load Sharing Facility LSF 5.1 allows local users to execute arbitrary programs by modifying the LSFENVDIR environment variable to reference an alternate lsf.conf file, then modifying LSFSERVERDIR to point to a malicious lim program, which lsadmin then executes...
CVE-2003-0326
CVE-2003-0326: Integer overflow in parse_decode_path() in slocate can allow arbitrary code execution when LOCATE_PATH contains a very large number of ":" characters, which is used in a malloc call. The existing sources describe the vulnerability and impact (local access with partial confidentiali...
CVE-2003-0325
CVE-2003-0325: Buffer overflow in Maelstrom 3.0.6, 3.0.5 and earlier allows local users to execute arbitrary code via a long -server command line argument. Connected sources confirm the affected versions and local-execution impact; no remediation details are provided in the documents.
CVE-2003-0326
Integer overflow in parsedecodepath of slocate may allow attackers to execute arbitrary code via a LOCATEPATH with a large number of ":" colon characters, whose count is used in a call to malloc...
CVE-2003-0328
CVE-2003-0328 describes a remote denial-of-service and potential arbitrary-code execution in EPIC IRC Client (EPIC4) when connecting to a malicious IRC server. The issue stems from a CTCP response with a large nickname that leads to an incorrect length calculation, enabling a buffer overrun. Publ...
CVE-2003-0328
EPIC IRC Client EPIC4 pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation...