CVE-2003-0292

Cross-site scripting XSS vulnerability in Inktomi Traffic-Server 5.5.1 allows remote attackers to insert arbitrary web script or HTML into an error page that appears to come from the domain that the client is visiting, aka "Man-in-the-Middle" XSS...

CVE-2003-0298

The CVE-2003-0298 entry concerns the Mozilla IMAP Client (versions 1.3 and 1.4a). A remote malicious IMAP server can trigger denial of service and possibly arbitrary code execution by sending certain large values for literals (and potentially mailbox sizes) that cause integer signedness or intege...

CVE-2003-0297

c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service crash and possibly execute arbitrary code via certain large 1 literal and 2 mailbox size values that cause either integer signedness errors or integer overflow errors...

CVE-2003-0295

CVE-2003-0295 describes an XSS vulnerability in the vBulletin 3.0.0 Beta 2 suite, specifically in private.php. The flaw allows remote attackers to inject arbitrary web script/HTML via the "Preview Message" capability, enabling cross-site scripting. The public sources identify the affected compone...

CVE-2003-0294

autohtml.php in php-proxima 6.0 and earlier allows remote attackers to read arbitrary files via the name parameter in a modload operation...

CVE-2003-0299

The CVE-2003-0299 issue affects the IMAP client code used by mutt 1.4.1 and Balsa 2.0.10. A remote malicious IMAP server can trigger denial of service and possibly arbitrary code execution by sending mailbox size values that cause signedness or integer overflow errors in the IMAP handling path. P...

CVE-2003-0298

The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large 1 literal and possibly 2 mailbox size values that cause either integer signedness errors or integer overflow errors...

CVE-2003-0296

The CVE-2003-0296 entry concerns the IMAP Client for Evolution 1.2.4. The issue arises from handling of certain large literal size values, triggering integer signedness errors or integer overflow in parsing, which can lead to denial of service and potentially arbitrary code execution. Affected co...

CVE-2003-0292

This CVE concerns an XSS vulnerability in Inktomi Traffic-Server 5.5.1. The issue allows remote attackers to inject arbitrary web script or HTML into error pages that appear to come from the visited domain, enabling a “Man-in-the-Middle” style XSS. Affected software: Inktomi Traffic-Server 5.5.1....

CVE-2003-0302

The CVE-2003-0302 entry concerns the IMAP Client for Eudora 5.2.1. The underlying issue is integer signedness/overflow errors triggered by certain large literal size values from a remote IMAP server, enabling a denial of service and potentially arbitrary code execution. Public documentation confi...

CVE-2003-0296

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors...

CVE-2003-0287

CVE-2003-0287 describes a cross-site scripting (XSS) vulnerability in Movable Type prior to 2.6, and possibly other versions including 2.63. An attacker could inject arbitrary script or HTML via the Name textbox, potentially when the "Allow HTML in comments?" option is enabled. The connected reco...

CVE-2003-0278

CVE-2003-0278 : The NVD/NVD-derived description identifies a cross‑site scripting (XSS) vulnerability in the normal_html.cgi component of Happycgi.com Happymall versions 4.3 and 4.4. The flaw allows remote attackers to inject arbitrary web script via the file parameter. This is limited to the des...

CVE-2003-0285

IBM AIX 5.2 and earlier distributes Sendmail with a configuration file sendmail.cf with the 1 promiscuousrelay, 2 acceptunresolvabledomains, and 3 acceptunqualifiedsenders features enabled, which allows Sendmail to be used as an open mail relay for sending spam e-mail...

CVE-2003-0289

Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter...

CVE-2003-0288

Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file...

CVE-2003-0280

Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long 1 MAIL FROM or 2 RCPT TO commands...

CVE-2003-0284

Adobe Acrobat 5 is vulnerable due to a flaw in its JavaScript parsing engine that could allow a malicious PDF to instruct Acrobat to write arbitrary files into the local Plug-ins folder, potentially spreading via other PDFs (notably associated with the W32.Yourde virus). The issue affects Acrobat...

CVE-2003-0277

The CVE-2003-0277 issue affects Happycgi Happymall (HappyMall) versions 4.3 and 4.4, where a directory traversal vulnerability is exposed in the normal_html.cgi script. The underlying problem is exploitation of .. (dot dot) sequences in the file parameter, enabling remote attackers to read arbitr...

CVE-2003-0287

Cross-site scripting XSS vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via the Name textbox, possibly when the "Allow HTML in comments?" option is enabled...