CVE-2003-0147

OpenSSL CVE-2003-0147 is documented as a timing-attack vulnerability where RSA private-key material can be inferred because RSA blinding is not used by default. The vulnerability arises from timing differences during Montgomery reductions and differing multiply routes (Karatsuba vs. normal), enab...

CVE-2003-0109

Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0...

CVE-2003-0030

Buffer overflows in protegrity.dll of Protegrity Secure.Data Extension Feature SEF before 2.2.3.9 allow attackers with SQL access to execute arbitrary code via the extended stored procedures 1 xpptycheckusers, 2 xpptyinsert, or 3 xpptyselect...

CVE-2003-0067

The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute...

CVE-2003-0121

Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not specify a MIME-Version header field, which is processed by some mail clients...

CVE-2003-1095

BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication information when a web application is redeployed, which could allow users of that application to gain access without having to re-authenticate...

CVE-2003-0122

Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name DN during NotesRPC authentication and an outer field length that is less than that of the DN field...

CVE-2003-0147

OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on 1 the number of extra reductions during Montgomery reduction, and 2 the use of different integer multiplication algorithms...

CVE-2003-0069

The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute...

CVE-2002-1507

Unreal Tournament 2003 ut2003 clients and servers allow remote attackers to cause a denial of service via malformed messages containing a small number of characters to UDP ports 7778 or 10777...

CVE-2003-0086

CVE-2003-0086 affects Samba up to version 2.2.8 and concerns the reg file write path. The issue is a race condition involving chown in the code that writes registration files, allowing a local user to overwrite arbitrary files. Public sources (e.g., Debian, Red Hat, Mandrake advisories) state a f...

CVE-2003-0081

Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers...

CVE-2003-0123

Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service crash via a long HTTP status line...

CVE-2003-0125

Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a denial of service reboot and execute arbitrary code via a long GET /OPTIONS value...

CVE-2003-0143

The popmsg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name...

CVE-2003-0109

CVE-2003-0109 is a remote code execution flaw caused by a buffer overflow in the Windows NTDLL.DLL when processing a WebDAV request to IIS 5.0. The vulnerability affects Windows NT 4.0/Terminal Server, Windows 2000, and Windows XP, with confirmed exploit examples and public PoCs (e.g., MS03-007) ...

CVE-2003-0146

CVE-2003-0146 affects NetPBM 9.20 and earlier (and possibly other versions). The described vulnerability is due to maths overflow errors (including integer signedness errors and integer overflows ) that can cause buffer overflows. Reported impacts include remote denial of service or arbitrary cod...

MS03-007: Unchecked Buffer in ntdll.dll (815021)

The remote version of Windows contains a buffer overflow in the Windows kernel, that could allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. For example this vulnerability can be exploited through the WebDAV component of IIS 5.0. A public exploit is available....

CVE-2003-0144

Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as 1 request ID or 2 user name...

CVE-2003-0030

Buffer overflows in protegrity.dll of Protegrity Secure.Data Extension Feature SEF before 2.2.3.9 allow attackers with SQL access to execute arbitrary code via the extended stored procedures 1 xpptycheckusers, 2 xpptyinsert, or 3 xpptyselect...