CVE-2003-0221

The CVE-2003-0221 entry concerns HP Tru64 UNIX 5.1B PK1 and earlier, where the (1) dupatch and (2) setld utilities are vulnerable to a local symlink attack that allows overwriting files and could lead to root privilege gain. Affected components are dupatch and setld; root-priority impact is state...

CVE-2003-0218

The CVE-2003-0218 entry concerns Monkey HTTP Server (monkeyd) up to version 0.6.1. A buffer overflow in the PostMethod() triggered by a POST with a large body is described as allowing remote code execution or a server crash. Public details across sources consistently note that vulnerable software...

CVE-2003-1072

Memory leak in lofiadm in Solaris 8 allows local users to cause a denial of service kernel memory consumption...

CVE-2003-0114

The CVE-2003-0114 entry affects Microsoft Internet Explorer 5.01, 5.5 and 6.0, where the file upload control can be abused by a malicious page to automatically upload files from the user’s local system via script. OpenVAS details corroborate IE 5.01/5.5/6.0 exposure and rate the impact as remote ...

CVE-2003-0210

Buffer overflow in the administration service CSAdmin for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002...

CVE-2003-0116

CVE-2003-0116 affects Microsoft Internet Explorer 5.01, 5.5 and 6.0. The vulnerability arises from IE not properly validating the Cascading Style Sheet input parameter used by Modal dialogs, enabling remote code execution where an attacker can run script in a dialog and read local files via a cra...

CVE-2003-0212

CVE-2003-0212 affects rinetd prior to 0.62. The vulnerability arises in handleAccept where the connection list is not resized correctly when full, causing an incorrect array index and enabling a remote attacker to cause a denial of service and potentially execute arbitrary code by opening a large...

CVE-2003-0213

ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow...

CVE-2003-0214

CVE-2003-0214 affects mime-support (Debian) up to version 3.22; run-mailcap can overwrite arbitrary files via a symlink attack on temporary files due to insecure temporary file handling. Debian issued DSAs 292-1/292-2/292-3 to fix mime-support. OpenVAS/NESSUS entries note the system may be missin...

CVE-2003-0213

ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow...

CVE-2003-0214

run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2003-0112

CVE-2003-0112 corresponds to a local privilege‑escalation in the Windows kernel. Technical details from connected docs show a buffer/stack overflow in ntoskrnl.exe related to debugging message handling (LpcRequestWaitReplyPort), enabling a local attacker to execute code with kernel privileges. Af...

CVE-2003-0114

The file upload control in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to automatically upload files from the local system via a web page containing a script to upload the files...

CVE-2003-0206

CVE-2003-0206 affects gkrellm-newsticker: the plugin before version 0.3-3.1 can crash the gkrellm process when a feed’s link or title elements are split across multiple lines, due to an incomplete parser/missing quoting. This is a remote denial of service vector described by Debian’s DSA-294-1 an...

CVE-2003-0205

CVE-2003-0205 affects the gkrellm-newsticker plugin for gkrellm: before 0.3-3.1, it allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker URI title. The Debian advisory DSA-294-1 fixes this by upgrading to 0.3-3.1. The associated CAN-2003-0205/0206 issues de...

CVE-2003-0113

CVE-2003-0113 concerns Microsoft Internet Explorer 5.01, 5.5 and 6.0. The issue is a buffer overflow in URLMON.DLL that can be triggered by an HTTP response containing abnormally long values in the Content-Type and Content-Encoding headers. Successful exploitation could allow an attacker to execu...

CVE-2003-0213

CVE-2003-0213 affects PoPToP PPTP server: a buffer overflow in ctrlpacket.c allows a remote attacker to cause denial of service (and potentially execute code) by sending a PPTP control packet with a length field of 0 or 1, which feeds a negative value into a read. Affected are PoPToP versions pri...

CVE-2003-0215

The CVE-2003-0215 issue affects bttlxeForum 2.0 beta 3 and earlier, due to a SQL injection vulnerability in the authentication path (username and password fields) that can bypass login. Evidence from multiple sources describes remote attackers potentially gaining access by injecting SQL, with at ...

CVE-2003-0210

The CVE-2003-0210 issue is a buffer overflow in Cisco Secure ACS for Windows CSAdmin (web management on port 2002). The root cause is CSAdmin handling a login request with an excessively long user parameter, triggering a buffer overflow that can cause DoS and may allow arbitrary code execution wi...

CVE-2003-0116

Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check the Cascading Style Sheet input parameter for Modal dialogs, which allows remote attackers to read files on the local system via a web page containing script that creates a dialog and then accesses the target files, aka "Modal...