CVE-2003-0313

The CVE-2003-0313 entry concerns a directory traversal vulnerability in Snowblind Web Server 1.0 that allows remote attackers to list arbitrary directory contents via a deceptive HTTP request containing a triple dot. The linked NVD entry lists a base score of 6.4 (Medium) with CVSS2: AV:N/AC:L/Au...

CVE-2003-0316

CVE-2003-0316 concerns Venturi Client before version 2.2, used in Fourelle and Venturi Wireless products, which can function as an open proxy/relay for various protocols, including SMTP, enabling abuse by spammers. The CVE description and NVD entry confirm the issue and its network scope; OpenVAS...

CVE-2003-0194

tcpdump does not properly drop privileges to the pcap user when starting up...

CVE-2003-0309

The CVE covers Microsoft Internet Explorer 5.01, 5.5, and 6.0 where a crafted web document with a large number of duplicate file:// or other requests using FRAME/IFRAME can trigger multiple file download dialogs, ultimately allowing remote code execution. The issue is mitigated by Microsoft patch...

CVE-2003-0188

CVE-2003-0188: lv, a multilingual file viewer, reads a .lv configuration file from the current working directory. A crafted .lv file placed in a directory can cause lv to execute arbitrary commands as the invoking user, enabling local privilege escalation (including root) on affected systems. Pub...

CVE-2003-0316

Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for various protocols, including an open relay for SMTP, which allows it to be abused by spammers...

CVE-2003-0315

Snowblind Web Server 1.0 is affected by a vulnerability where a long HTTP request can trigger a buffer overflow, leading to remote denial of service and potentially arbitrary code execution. The documentation consistently states DoS and possible code execution as outcomes. There are no exploit de...

CVE-2003-0304

The CVE-2003-0304 entry concerns One||Zero Helpdesk 1.4 rc4, where remote attackers can create administrator accounts by directly invoking the Helpdesk Installation script (install.php). The vulnerability arises from improper handling of installation script execution, enabling privilege escalatio...

CVE-2003-0307

CVE-2003-0307 affects Poster version.two, a PHP-based news posting system. The description states that remote authenticated users can gain administrative privileges by inserting a pipe character (|) and the value "admin" into the email address field, enabling privilege escalation to an admin acco...

CVE-2003-0188

lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories...

CVE-2003-0308

The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via 1 expn, 2 checksendmail, or 3 doublebounce.pl...

[RHSA-2003:169-01] Updated lv packages fix vulnerability

--------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated lv packages fix vulnerability Advisory ID: RHSA-2003:169-01 Issue date: 2003-05-16 Updated on: 2003-05-16 Product: Red Hat Linux Keywords: local root exploit Cross references:...

CVE-2003-0294

The CVE-2003-0294 issue affects php-proxima (version 6.0 and earlier) where autohtml.php contains a flaw in the modload operation that allows remote attackers to read arbitrary files via the name parameter. This is documented across multiple sources (NVD/NVD clone, CVE records, and a Tenable Ness...

CVE-2003-0246

CVE-2003-0246 affects the Linux kernel (2.4.x) where the ioperm system call does not properly restrict privileges, enabling a local user to gain read and/or write access to certain I/O ports on 2.4.20 and earlier. The connected OpenVAS and advisory records reference Debian and other vendor adviso...

CVE-2003-0300

CVE-2003-0300 concerns the IMAP Client for Sylpheed 0.8.11. A remote IMAP server can trigger a denial-of-service (crash) by sending certain large literal size values that lead to signedness errors or integer overflow in the client. The available sources describe the vulnerability as a DoS conditi...

CVE-2003-0297

c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service crash and possibly execute arbitrary code via certain large 1 literal and 2 mailbox size values that cause either integer signedness errors or integer overflow errors...

CVE-2003-0301

CVE-2003-0301 concerns the IMAP Client for Outlook Express 6.00.2800.1106. The issue is triggered by certain large literal size values that cause integer signedness or integer overflow errors during parsing, enabling remote servers to induce a denial of service (crash). The public sources in the ...

CVE-2003-0297

CVE-2003-0297 affects the c-client IMAP client (as used in imap-2002b and Pine 4.53). The flaw allows remote malicious IMAP servers to trigger a denial of service (crash) and potentially execute arbitrary code via large literal and mailbox size values, due to integer signedness/overflow errors. R...

CVE-2003-0302

The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors...

CVE-2003-0293

CVE-2003-0293 (PalmOS) : PalmOS devices are described as vulnerable to a denial-of-service caused by a flood of ICMP echo requests (ping), which can lead to CPU consumption or device unresponsiveness. The available public description attributes the impact to the OS handling of ICMP traffic, but t...