CVE-2003-0268

SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which reveals the path in an error message...

CVE-2003-0267

CVE-2003-0267 affects SLWebMail 3 on Windows, where ShowGodLog.dll can be invoked directly with a full-path argument, allowing remote attackers to read arbitrary files. The underlying issue is that ShowGodLog.dll accepts an argument that specifies a target file path, enabling file disclosure. The...

CVE-2003-0260

Cisco VPN 3000 Series Concentrators and Cisco VPN 3002 Hardware Client (2.x.x–3.6.7A) are affected by a DoS vulnerability caused by a flood of malformed ICMP packets, potentially degrading performance or causing a reload. The issue is triggered remotely and is documented across NVD and CERT advis...

CVE-2003-0262

leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges, which KATAXWR is not designed to have...

CVE-2003-0263

Multiple buffer overflows in Floosietek FTGate Pro Mail Server FTGatePro 1.22 allow remote attackers to execute arbitrary code via long 1 MAIL FROM or 2 RCPT TO commands...

CVE-2003-0263

CVE-2003-0263 describes multiple remote, stack-based buffer overflows in Floosietek FTGate Pro Mail Server v1.22 that allow an attacker to execute arbitrary code by sending excessively long MAIL FROM or RCPT TO commands. The vulnerability resides in command handling, enabling remote exploitation ...

CVE-2003-0259

The CVE-2003-0259 issue affects Cisco VPN 3000 Series Concentrators and the Cisco VPN 3002 Hardware Client (2.x–3.6.7). A malformed SSH initialization packet during the initial SSH session setup could cause the device to reload, yielding a denial-of-service condition. CERT/CC and Cisco advisories...

CVE-2003-0265

The CVE-2003-0265 entry describes a race condition in SAP database’s SDBINST (version 7.3.0.29) that creates critical files with world-writable permissions before initializing the setuid bits. This allows local attackers to modify files before permissions are changed, potentially gaining root pri...

CVE-2003-0262

CVE-2003-0262 concerns leksbot 1.2.3 on Debian GNU/Linux, where the program KATAXWR is installed as setuid root due to a packaging error. This misconfiguration enables local users to attempt privilege escalation to root, leveraging vulnerabilities in KATAXWR that it was not designed to expose to ...

CVE-2003-0261

CVE-2003-0261 affects fuzz, including version 0.6 and earlier, where the process creates temporary files insecurely. This flaw can allow local users to gain root privileges due to improper secure handling of temporary files. The described impact is local privilege escalation with partial confiden...

CVE-2003-0244

CVE-2003-0244 affects the Linux 2.4 kernel (route cache) and the Netfilter IP conntrack module, enabling remote attackers to cause CPU denial of service via forged packets that trigger a high number of hash collisions. The OpenVAS and Debian advisories reference kernel updates across various dist...

CVE-2003-0260

Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service slowdown and possibly reload via a flood of malformed ICMP packets...

CVE-2003-0264

CVE-2003-0264 affects SLMail/Seattle Lab Mail 5.1.0.4420, where multiple buffer overflows in slmail.exe allow remote code execution. The overflow conditions involve excessively long EHLO, XTRN, POPPASSWD, or POP3 password fields, enabling an attacker to run arbitrary code with network access. Pub...

CVE-2003-0266

The CVE-2003-0266 entry concerns SLWebMail 3 on Windows with multiple buffer overflows that can be triggered by long parameters to showlogin.dll, recman.dll, admin.dll, or globallogin.dll. This allows remote attackers to cause denial of service and potentially execute arbitrary code. Affected com...

Apache 2.0.x < 2.0.46 on OS/2 filestat.c Device Name Request DoS

The remote host appears to be running a version of Apache 2.0.x that is prior to 2.0.46 on OS/2. There is a vulnerability specific to such versions running on OS/2 in 'filestat.c' that could allow an attacker to disable this service remotely. Note that Nessus solely relied on the version number o...

CVE-2003-0235

CVE-2003-0235 is a format string vulnerability in Mirabilis ICQ Pro 2003a's integrated POP3 client (POP3.dll). The bug resides in the UIDL server response string, where format specifiers can be exploited by a remote attacker posing as the POP3 server, potentially enabling arbitrary code execution...

CVE-2003-0239

CVE-2003-0239 concerns the GIF89a parsing/rendering library in Mirabilis ICQ Pro 2003a (icqateimg32.dll). Affected: ICQ Pro 2003a and earlier. Issue: input validation error when parsing GIF headers that lack a Global Color Table (GCT) or Local Color Table (LCT) after an Image Descriptor, enabling...

CVE-2003-0236

Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the 1 Subject or 2 Date headers...

CVE-2003-0235

Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command...

CVE-2003-0236

CVE-2003-0236 concerns Mirabilis ICQ Pro 2003a’s integrated POP3 client (POP3.dll COM object). The vulnerability is a 16‑bit signed overflow in the Subject and Date headers (Subject/Date fields) of e‑mail messages, allowing an attacker to craft headers that can execute arbitrary commands on a vul...