CVE-2003-0201

CVE-2003-0201 describes a buffer overflow in Samba's trans2open handling. Specifically, the overflow occurs in call_trans2open in trans2.c, affecting Samba 2.2.x before 2.2.8a, Samba 2.0.x before 2.0.10 (and earlier 2.0.x releases), and Samba-TNG before 0.3.2. This allows remote attackers to exec...

CVE-2003-0133

CVE-2003-0133 affects GtkHTML as used by Evolution prior to 1.2.4. The vulnerability allows remote attackers to crash the Evolution client by sending certain malformed HTML messages. Multiple advisories (Conectiva/MDKSA-2003:046) indicate a remote crash via gtkhtml; patches/upgrades for gtkhtml a...

CVE-2003-0207

CVE-2003-0207 affects the ps2epsi component in gs-common. The root cause is insecure creation of temporary files when ps2epsi invokes ghostscript, which can allow a local attacker to overwrite arbitrary files. The vulnerability is documented in Debian DSA-286-1 and is reflected in multiple feeds ...

CVE-2003-0173

xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges...

CVE-2003-0201

Buffer overflow in the calltrans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code...

CVE-2003-0110

The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration ISA Server 2000 allow remote attackers to cause a denial of service CPU consumption or packet storm via a spoofed, malformed packet to UDP port 1745...

CVE-2003-0111

The ByteCode Verifier component of Microsoft Virtual Machine VM build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security checks and execute arbitrary code via a malicious Java applet, aka "Flaw in Microsoft VM Could Enable System Compromise....

CVE-2003-0171

Summary (CVE-2003-0171) : Mac OS X DirectoryService is vulnerable because it uses system(2) to run touch(1) without a full path, allowing a local attacker to alter PATH and execute a malicious touch as root. This can lead to privilege escalation and DoS. The attack is mediated by terminating Dire...

CVE-2003-0198

CVE-2003-0198 affects Mac OS X versions prior to 10.2.5, where guest users can modify permissions of the DropBox folder and read unauthorized files. The CVSS v2 base metrics indicate a 6.4 score (Medium) with network attack vector, low attack complexity, no authentication, and partial impacts on ...

CVE-2003-0208

CVE-2003-0208 describes an XSS vulnerability in Macromedia Flash ad user tracking, exploitable via the clickTAG field to inject arbitrary JavaScript. Affected component: Flash ad-tracking capability; root cause: input in clickTAG not properly sanitized. Impact (per provided metrics): partial inte...

CVE-2003-0136

psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file...

CVE-2003-0163

The CVE affects the Gaim-Encryption plugin (versions 1.15 and earlier). The underlying issue is insufficient validation of the message length parameter in decrypt_msg, allowing a remote attacker to cause a denial of service by writing a zero byte into arbitrary heap memory when a negative length ...

CVE-2003-0111

The CVE-2003-0111 issue affects the ByteCode Verifier component of Microsoft Virtual Machine (VM) used in Windows/Internet Explorer, specifically build 5.0.3809 and earlier. The underlying flaw is that the VM bytecode verifier fails to properly check certain Java applets, allowing remote attacker...

CVE-2003-0169

hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of service CPU consumption via a request to hpnst.exe that calls itself, which causes an infinite loop...

CVE-2003-0197

Buffer overflow gdslockmgr of Interbase Database 6.x allows local users to gain privileges via a long ISCLOCKENV environment variable INTERBASELOCK...

PoPToP < 1.1.3-b3/1.1.3-20030409 - Negative Read Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Poptop...

CVE-2003-0203

**CVE-2003-0203 is a confirmed buffer overflow in moxftp up to version 2.2 (and xftp) that allows a remote FTP server to execute arbitrary code by sending a long FTP banner. The root cause is insufficient bounds checking in the FTP banner handling. Debian’s DSA-281 and related advisories document...

CVE-2003-0203

Buffer overflow in moxftp 2.2 and earlier allows remote malicious FTP servers to execute arbitrary code via a long FTP banner...

XMB < 1.9.1 Multiple XSS

The remote host is running XMB Forum, a web forum written in PHP. The version of XMB installed on the remote host is affected by several cross-site scripting issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Samba security problem fixed

The samba packages in Slackware 8.1 and 9.0 have been upgraded to Samba 2.2.8a to fix a security problem. All sites running samba should upgrade. Here are the details from the Slackware 9.0 ChangeLog: Mon Apr 7 14:26:53 PDT 2003 patches/packages/samba-2.2.8a-i386-1.tgz: Upgraded to samba-2.2.8a...