CVE-2003-0222

Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter...

CVE-2003-0212

handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes full and sets an array index incorrectly, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of connections...

CVE-2003-0116

Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check the Cascading Style Sheet input parameter for Modal dialogs, which allows remote attackers to read files on the local system via a web page containing script that creates a dialog and then accesses the target files, aka "Modal...

CVE-2003-0117

Buffer overflow in the HTTP receiver function BizTalkHTTPReceive.dll ISAPI of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver...

CVE-2003-0221

The 1 dupatch and 2 setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allows local users to overwrite files and possibly gain root privileges via a symlink attack...

CVE-2003-0213

ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow...

CVE-2003-0212

handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes full and sets an array index incorrectly, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of connections...

miniPortail admin.php Cookie Manipulation Security Bypass

The remote host is running MiniPortal, a PHP application for managing a web portal. It is possible to bypass admin authentication by setting a cookie with a value of 'adminok' on admin.php. A remote attacker could exploit this to gain administrative privileges on this host. %NASLMINLEVEL 70300 C...

CVE-2003-0256

The CVE affects kopete prior to version 0.6.2, specifically its GnuPG plugin. The issue arises because the plugin does not properly sanitize the command line passed to gpg, enabling remote attackers to execute arbitrary commands in the user’s kopete client context by sending specially crafted mes...

CVE-2003-0273

The CVE-2003-0273 entry describes a cross-site scripting (XSS) vulnerability in the web interface of Request Tracker (RT) versions 1.0 through 1.0.7, allowing remote attackers to execute script via message bodies. CVSS v2 base metrics indicate a Medium impact with Partial confidentiality, integri...

CVE-2003-0274

CVE-2003-0274 involves a buffer overflow in catmail for ListProc 8.2.09 and earlier that lets remote attackers execute arbitrary code via a long ULISTPROC_UMASK value. Affected product: ListProc (catmail component) with version 8.2.09 and earlier. Root cause: unchecked, overly long ULISTPROC_UMAS...

CVE-2003-0243

CVE-2003-0243 affects Happycgi Happymall 4.3/4.4. The normal_html.cgi and member_html.cgi scripts pass user input to shell operations without proper filtering, enabling remote arbitrary OS command execution via crafted file parameters. Impact: remote code execution with web server privileges. Exp...

CVE-2003-0274

Buffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute arbitrary code via a long ULISTPROCUMASK value...

CVE-2003-0228

CVE-2003-0228 describes a directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP. An attacker can cause arbitrary code execution by delivering a skins file whose URL contains hex-encoded backslashes (%5C), leading to placement of an executa...

CVE-2003-0269

Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable...

CVE-2003-0228

Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters %5C that causes an executable to be placed in an arbitrary...

CVE-2003-0268

CVE-2003-0268 concerns SLWebMail 3 on Windows. The vulnerability arises when remote attackers cause invalid requests to DLLs (e.g., WebMailReq.dll), causing the server to disclose its full path in an error message. This is an information disclosure vulnerability with potential reconnaissance risk...

CVE-2003-0266

Multiple buffer overflows in SLWebMail 3 on Windows systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a long Language parameter to showlogin.dll, 2 a long CompanyID parameter to recman.dll, 3 a long CompanyID parameter to admin.dll, or 4 a long...

CVE-2003-0268

SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which reveals the path in an error message...

CVE-2003-0258

Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication...