CVE-2003-0131

...

CVE-2003-0010

Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript JScript.dll on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based...

Security fix for the ALT Linux 9 package krb5 version 1.2.7-alt2

March 24, 2003 Alexander Bokovoy 1.2.7-alt2 - Fixed: + MITKRB5-SA-2003-03 + CAN-2003-0072 + CAN-2003-0082...

Mambo Site Server 4.0.10 XSS

An attacker may use the installed version of Mambo Site Server to perform a cross-site scripting attack on this host. %NASLMINLEVEL 70300 This script was completely rewritten by Tenable Network Security, using a new API Message-ID: From: Ertan Kurt To: Subject: Some XSS vulns...

CVE-2003-0157

CVE-2003-0157 is rejected/not used and does not represent an active vulnerability entry.

CVE-2003-0028

Integer overflow in the xdrmemgetbytes function, and possibly other functions, of XDR external data representation libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different...

CVE-2003-0129

CVE-2003-0129 affects Ximian Evolution Mail User Agent up to version 1.2.2, allowing remote attackers to cause memory exhaustion/DoS by uuencoding a mail message multiple times. Related issues CAN-2003-0128 and CAN-2003-0130 are addressed in the same advisory. Vendor patch: Evolution 1.2.3 releas...

CVE-2003-0010

The CVE-2003-0010 issue is a heap-based overflow in the Windows Script Engine (JsArrayFunctionHeapSort in JScript.dll) that can allow remote code execution via a malicious web page or HTML e-mail. Affected component is Windows Script Engine/JScript.dll; exploit arises from handling large array in...

CVE-2003-0157

...

CVE-2003-0156

The CVE-2003-0156 vulnerability affects Cross-Referencing Linux (LXR), specifically the CGI component handling the v parameter in the source page. The root cause is insufficient input sanitization, enabling a directory-traversal attack to read arbitrary files on the host. This is evidenced by Deb...

CVE-2003-0128

The CVE-2003-0128 family affects Ximian Evolution Mail User Agent (MUA) prior to version 1.2.3, via the try_uudecoding function in mail-format.c that decodes UUEncoded headers. The vulnerability can cause a denial of service (crash) and may allow arbitrary code execution through crafted UUE heade...

CVE-2003-0140

Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a crafted folder...

CVE-2003-0011

Microsoft ISA Server DNS – Denial Of Service (MS03-009): A vulnerability exists in the ISA Server 2000 DNS intrusion detection application filter that can be exploited by a specially formed DNS request to cause a denial of service in DNS services. Public references describe that the attacker can ...

CVE-2003-0139

The connected Debian advisory (DSA-266-1) confirms CVE-2003-0139 concerns MIT Kerberos 4 (krb4) weaknesses in the krb5 distribution. Specifically, when using triple-DES keys to protect krb4 services, an attacker can craft krb4 tickets for unauthorized principals via a cut-and-paste/ticket-splicin...

CVE-2003-0128

The tryuudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a malicious uuencoded UUE header, possibly triggering a heap-based buffer overflow...

CVE-2003-0129

Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service memory consumption via a mail message that is uuencoded multiple times...

CVE-2003-0150

MySQL

CVE-2003-0156

Directory traversal vulnerability in Cross-Referencing Linux LXR allows remote attackers to read arbitrary files via .. dot dot sequences in the v parameter...

CVE-2003-0140

CVE-2003-0140 describes a buffer overflow in Mutt’s IMAP code (affecting Mutt 1.4.x, earlier 1.5.x up to 1.5.3) and in other code paths such as Balsa before 2.0.10 that include Mutt components. The overflow can be triggered by a malicious IMAP server via a crafted folder, allowing a remote attack...

CVE-2003-0151

CVE-2003-0151 affects BEA WebLogic Server and Express versions 6.0–7.0. The vulnerability is an access-control flaw in internal admin servlets that may allow remote attackers to read arbitrary files or execute arbitrary code. The connected sources confirm the affected products and the nature of t...