CVE-2003-0161

The prescan function in the address parser parseaddr.c in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers t...

CVE-2003-0091

CVE-2003-0091 corresponds to a stack-based buffer overflow in the lpq program on Sun Solaris 2.6/2.6_x86/7, in the bsd_queue() function, allowing local users to gain root privileges. Solaris 8/9 mitigates this via strlcat. Exploitation details are not provided in the documents; NSFOCUS reports th...

CVE-2003-0091

Stack-based buffer overflow in the bsdqueue function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege...

DDI1012.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Digital Defense Inc. Security Advisory DDI-1012 [email protected] http://www.digitaldefense.net/ -...

CVE-2003-0147

...

CVE-2003-0080

The iptables ruleset in Gnome-lokkit in Red Hat Linux 8.0 does not include any rules in the FORWARD chain, which could allow attackers to bypass intended access restrictions if packet forwarding is enabled...

DEBIAN-CVE-2003-0147

OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on 1 the number of extra reductions during Montgomery reduction, and 2 the use of different integer multiplication algorithms...

CVE-2003-0085

Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon smbd in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code...

CVE-2003-0127

...

Immunity Canvas: MS03_007

Name| ms03007 ---|--- CVE| CVE-2003-0109 Exploit Pack| CANVAS Description| Microsoft IIS 5.0 WebDav Overflow Notes| CVE Name: CVE-2003-0109 VENDOR: Microsoft MSADV: MS03-007 Repeatability: Repeatable References: http://www.microsoft.com/technet/security/bulletin/MS03-007.mspx CVE Url:...

CVE-2003-0127

The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel...

Immunity Canvas: SAMBA_NTTRANS

Name| sambanttrans ---|--- CVE| CVE-2003-0085 Exploit Pack| CANVAS Description| sambanttrans Notes| References: http://www.samba.org/samba/whatsnew/samba-2.2.8.html CVE Name: CVE-2003-0085 VENDOR: Samba Development Notes: WARNING! This exploit can get you more than one shell-listener because of t...

CVE-2003-0086

The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown...

ScozBook scozbook/add.php Multiple Parameter XSS

The remote host is running ScozBook This set of CGI has two vulnerabilities : - It is vulnerable to cross-site scripting attacks in add.php - If the user requests view.php with a crafted PG Variable, he will obtain the physical path of the remote CGI An attacker may use these flaws to steal the...

CVE-2003-0178

CVE-2003-0178 affects IBM Lotus Domino Web Server (iNotes) prior to 6.0.1. The vulnerability is a set of buffer overflows caused by improper handling of user-supplied values: (1) s_ViewName and (2) Foldername in the PresetFields parameter for iNotes, and (3) overly long Host headers that get inse...

CVE-2003-0180

CVE-2003-0180 affects Lotus Domino Web Server (nhttp.exe) prior to 6.0.1, with a denial-of-service condition via an incomplete POST request (as demonstrated by h_PageUI form). OpenVAS entries corroborate a related HTTP/1.1 header overflow vector that could crash the web server and, in some descri...

CVE-2003-0179

Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control...

CVE-2003-0180

Lotus Domino Web Server nhttp.exe before 6.0.1 allows remote attackers to cause a denial of service via an incomplete POST request, as demonstrated using the hPageUI form...

CVE-2003-0167

The CVE-2003-0167 entry concerns multiple off-by-one buffer overflows in the IMAP capability of Mutt (<=1.3.28) and Balsa (

CVE-2003-0141

The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the...