10089 matches found
CVE-2003-0118
SQL injection vulnerability in the Document Tracking and Administration DTA website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to 1 rawdocdata.asp or 2 RawCustomSearchField.asp containing an embedded SQL statement...
CVE-2003-0117
Buffer overflow in the HTTP receiver function BizTalkHTTPReceive.dll ISAPI of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver...
CVE-2003-0233
CVE-2003-0233 concerns Internet Explorer (IE) on Windows, describing a heap-based buffer overflow in the plugin.ocx component across IE 5.01, 5.5, and 6.0. The underlying issue is a heap-based overflow triggered via the Load() method, enabling remote code execution. This CVE is stated as a differ...
CVE-2003-0115
Microsoft Internet Explorer 5.01, 5.5 and 6.0 are affected by CVE-2003-0115 due to improper validation of parameters during third-party rendering, enabling remote script execution. OpenVAS entries identify the issue as part of the IE cumulative patch set (890923) and MS05-020, with guidance that ...
CVE-2003-0117
CVE-2003-0117 : A buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 enables an attacker to execute arbitrary code via a crafted HTTP request. The vulnerability is discussed in external advisories referencing MS03-016 and is corroborated ...
CVE-2003-0115
Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check parameters that are passed during third party rendering, which could allow remote attackers to execute arbitrary web script, aka the "Third Party Plugin Rendering" vulnerability, a different vulnerability than CVE-2003-0233...
CVE-2003-0118
CVE-2003-0118 affects Microsoft BizTalk Server 2000 and 2002 through the Document Tracking and Administration (DTA) web interface. The vulnerability is a SQL injection in two endpoints (rawdocdata.asp and RawCustomSearchField.asp) that allows remote attackers to embed SQL statements and, per desc...
CVE-2003-0233
Heap-based buffer overflow in plugin.ocx for Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via the Load method, a different vulnerability than CVE-2003-0115...
CVE-2003-0190
OpenSSH-portable OpenSSH 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack...
CVE-2003-0190
OpenSSH-portable OpenSSH 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack...
CVE-2003-0190
CVE-2003-0190 affects OpenSSH-portable/OpenSSH 3.6.1p1 and earlier with PAM enabled. The vulnerability is a timing side‑channel: when a login attempts with a non-existent username, an error is returned immediately, allowing remote attackers to determine valid usernames. This is an information dis...
CVE-2003-0222
CVE-2003-0222 : A stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows an attacker to execute arbitrary code via a CREATE DATABASE LINK query containing a connect string with a long USING parameter. The vulnerability requires a valid databa...
Macromedia ColdFusion MX CFIDE/probe.cfm Direct Request Path Disclosure
A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests port 8500 are received by the server, an error message is returned containing the full path of the ColdFusion installation. %NASLMINLEVEL...
CVE-2003-0219
Kerio Personal Firewall (KPF) is affected by CVE-2003-0219 through versions up to 2.1.4 due to a design flaw in the remote administration authentication that enables replay of a previously captured session to issue administrator commands. CORE Security advisories (BID 7179/7180) describe two issu...
CVE-2003-0220
Kerio Personal Firewall (KPF) 2.1.4 and earlier contains a remote buffer overflow in the administrator authentication handshake that allows remote code execution. Evidence from CVE-2003-0220 and multiple sources confirms the vulnerability affects the admin port, enabling arbitrary code execution ...
CVE-2003-0084
The CVE-2003-0084 issue affects the mod_auth_any Apache module included in Red Hat Enterprise Linux 2.1 (and other OS) where arguments passed to external programs are not properly escaped. This enables remote attackers to execute arbitrary commands via shell metacharacters, potentially running co...
CVE-2003-0174
The vulnerability affects SGI IRIX: the LDAP name service (nsd) and libns_ldap.so on IRIX 6.5.x (IRIX 6.5.19 and earlier). The root cause is that nsd does not verify whether the LDAP server provides the USERPASSWORD attribute for entries, which could allow an attacker to log in without a password...
CVE-2003-0084
modauthany package in Red Hat Enterprise Linux 2.1 and other operating systems does not properly escape arguments when calling other programs, which allows attackers to execute arbitrary commands via shell metacharacters...
CVE-2003-0174
The LDAP name service nsd in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password...