CVE-2003-0239

icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF89a headers that do not contain a GCT Global Color Table or an LCT Local Color Table after an Image Descriptor...

CVE-2003-0255

GnuPG contains a vulnerability (CVE-2003-0255) where the key validation logic in versions prior to 1.2.2 incorrectly determines the validity of keys with multiple user IDs, effectively assigning the highest trust value to all UIDs on a key. This can prevent warning prompts when encrypting to a ke...

CVE-2003-0238

CVE-2003-0238 impacts Mirabilis ICQ Pro 2003a and earlier. The flaw resides in ICQ’s Message Session HTML rendering library used by the ADS/advertising component. By spoofing the ADS server and sending malformed HTML, an attacker can trigger a denial-of-service condition, consuming CPU and freezi...

thttpd Host Header Traversal Arbitrary File Access

The remote HTTP server allows anyone to browse the files on the remote host by sending HTTP requests with a Host: field set to '../../'. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11576; scriptversion "1.18"; scriptcveid"CVE-2002-1562", "CVE-2003-0899";...

Multiple bugs in ICQ 2003

Format string bug in integer overflows in POP3 client, multiple DoS conditions...

MDaemon IMAP Server CREATE Command Mailbox Name Handling Overflow

According to its banner, the version of MDaemon running on the remote host has a buffer overflow vulnerability in the CREATE command. A remote attacker could exploit this to execute arbitrary code, or cause a denial of service. A crash would prevent other MDaemon services SMTP, POP from running a...

Immunity Canvas: SAMBA_TRANS2

Name| sambatrans2 ---|--- CVE| CVE-2003-0201 Exploit Pack| CANVAS Description| sambatrans2 Notes| References: http://www.redhat.com/support/errata/RHSA-2003-137.html CVE Name: CVE-2003-0201 VENDOR: Samba Date public: Apr 07, 2003 CERT Advisory: Versions Tested: Red Hat Linux release 8.0 Psyche:...

CVE-2003-0173

xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges...

CVE-2003-0133

GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of service crash via certain malformed messages...

CVE-2003-0201

Buffer overflow in the calltrans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code...

CVE-2003-0208

Cross-site scripting XSS vulnerability in Macromedia Flash ad user tracking capability allows remote attackers to insert arbitrary Javascript via the clickTAG field...

CVE-2003-0163

decryptmsg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service crash via a negative length, which overwrites arbitrary heap memory with a zero byte...

CVE-2003-0173

xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges...

CVE-2003-0136

psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file...

CVE-2003-0207

ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers to overwrite arbitrary files...

CVE-2003-0209

Integer overflow in the TCP stream reassembly module stream4 for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow...

CVE-2003-0110

The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration ISA Server 2000 allow remote attackers to cause a denial of service CPU consumption or packet storm via a spoofed, malformed packet to UDP port 1745...

CVE-2003-0111

The ByteCode Verifier component of Microsoft Virtual Machine VM build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security checks and execute arbitrary code via a malicious Java applet, aka "Flaw in Microsoft VM Could Enable System Compromise....

CVE-2003-0171

DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program...

CVE-2003-0196

Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different vulnerability than CVE-2003-0201...