CVE-2003-0343

BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid username is entered, which makes it easier for remote attackers to conduct brute force attacks...

CVE-2003-0341

Cross-site scripting XSS vulnerability in Owl Intranet Engine 0.71 and earlier allows remote attackers to insert arbitrary script via the Search field...

eZ Publish articleview.php XSS

The remote host is using ezPublish, a content management system. There is a flaw in the remote ezPublish which lets an attacker perform a cross-site scripting attack. An attacker may use this flaw to steal the cookies of your legitimate users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2003-0310

Cross-site scripting XSS vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script...

CVE-2003-0310

CVE-2003-0310 affects the eZ Publish web content system, specifically versions

CVE-2003-0307

Poster version.two allows remote authenticated users to gain administrative privileges by appending the "|" field separator and an "admin" value into the email address field...

CVE-2003-0304

one||zero aka One or Zero Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script...

CVE-2003-0306

Summary: CVE-2003-0306 is a buffer overflow in Windows XP’s EXPLORER.EXE triggered by a specially crafted desktop.ini containing a long .ShellClassInfo parameter, allowing arbitrary code execution as the logged-in XP user. The issue is detailed in multiple sources and is tied to the MS03-027 bull...

CVE-2003-0242

Mac OS X IPSec before 10.2.6 is affected by a vulnerability in how incoming security policies that match by port are processed. The IPSec implementation may allow traffic that should be blocked by policy, potentially bypassing ACLs and reaching a host that should not be reachable. At a high level...

CVE-2003-0309

Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which eventually cause...

CVE-2003-0188

lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories...

CVE-2003-0313

Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to list arbitrary directory contents via a ... triple dot in an HTTP request...

CVE-2003-0308

CVE-2003-0308 : The Debian GNU/Linux 3.0 package of Sendmail 8.12.3 does not securely create temporary files, enabling local users to gain additional privileges via the expn, checksendmail, or doublebounce.pl scripts. The issue is due to insecure temporary file handling within these components. E...

CVE-2003-0315

Snowblind Web Server 1.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP request, which may trigger a buffer overflow...

CVE-2003-0314

CVE-2003-0314 affects Snowblind Web Server 1.0. The vulnerability allows remote attackers to cause a denial-of-service (crash) by requesting a URL that ends with a “

CVE-2003-0303

CVE-2003-0303 corresponds to a SQL injection in OneOrZero Helpdesk 1.4 RC4. The vulnerability allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter (tupdate.php), affecting the integrity of the helpdesk data without affecting confidentiality. Connected source...

CVE-2003-0194

tcpdump does not properly drop privileges to the pcap user when starting up...

CVE-2003-0308

The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via 1 expn, 2 checksendmail, or 3 doublebounce.pl...

CVE-2003-0194

tcpdump (affected up to versions prior to the Red Hat patches) had a bug where privileges were not dropped to user 'pcap' at startup due to a compilation error, causing it to run as root unless the -U flag was used. Red Hat advisories RHSA-2003:151 and related NASL/redhat entries describe updated...

CVE-2003-0312

CVE-2003-0312 applies to Snowblind Web Server 1.0 and describes a directory traversal vulnerability that allows remote attackers to read arbitrary files by crafting HTTP requests containing .. sequences. The vulnerability arises in the server’s handling of path traversal and can lead to exposure ...