CVE-2003-0137

SNMP daemon in the DX200 based network element for Nokia Serving GPRS support node SGSN allows remote attackers to read SNMP options via arbitrary community strings...

CVE-2003-0137

The CVE affects the SNMP daemon in the DX200-based Nokia SGSN network element. It allows remote attackers to read SNMP options by using arbitrary community strings, enabling partial information disclosure. No remediation details are provided in the supplied documents. Exploitation status or in-th...

CVE-2003-0144

Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as 1 request ID or 2 user name...

CVE-2003-0030

The CVE-2003-0030 issue affects Protegrity Secure.Data for Microsoft SQL Server 2000, where buffer overflows in protegrity.dll (SEF) enable arbitrary code execution via extended stored procedures xp_pty_checkusers, xp_pty_insert, and xp_pty_select. Affected versions include SEF prior to 2.2.3.9; ...

CVE-2003-0144

CVE-2003-0144 describes a buffer overflow in the lpr component of BSD/lpr systems (notably Debian's lpr and Mandrake lpr-ppd) that an unprivileged local user can exploit to gain root privileges via long command-line inputs. Public advisories (DSA-267/DSA-275, MDKSA-2003:059) confirm local access ...

MySQL datadir/my.cnf Modification Privilege Escalation

The remote version of MySQL is older than 3.23.56. Such versions are affected by an issue that may allow the mysqld service to start with elevated privileges. An attacker can exploit this vulnerability by creating a 'DATADIR/my.cnf' that includes the line 'user=root' under the 'mysqld' option...

Cisco SIP Crafted INVITE Message Handling DoS (CSCdz39284, CSCdz41124)

It is possible to make the remote IOS crash when sending it malformed SIP packets. These vulnerabilities are documented as CISCO bug id CSCdz39284 and CSCdz41124. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11380; scriptversion"1.21"; scriptcveid"CVE-2003-1109";...

Cisco IOS ICMP Redirect Message Spoofing Remote DoS (CSCdx92043)

Sending bogus ICMP redirect packets, a malicious user can either disrupt or intercept communication from a router. This vulnerability is documented with the CISCO bug ID CSCdx92043 C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11379; scriptversion"1.22";...

CVE-2003-0126

The CVE-2003-0126 entry concerns the web interface of SOHO Routefinder 550 devices (firmware 4.63 and older; possibly later) that ships with a default admin account using a blank password. This (LAN‑facing) vulnerability enables unauthorized activities by attackers on the local network due to wea...

Qpopper pop_msg() Macroname Remote Overflow

The remote Qpopper server, according to its banner, is vulnerable to a one-byte overflow ih its popmsg function after a call to Qvsnprintf. An attacker may use this flaw to execute code with the privileges of the Qpopper service usually non-root, provided that he has a valid POP account to log in...

Mambo Site Server MD5 Hash Session ID Privilege Escalation

The remote installation of Mambo Site Server improperly validates the cookies that are sent back by the user. As a result, a user may impersonate the administrator by using the MD5 value of a received cookie and thereby gain administrative control of the affected application. %NASLMINLEVEL 70300 ...

Solaris sendmail .forward Local Privilege Escalation

The remote sendmail server, according to its version number, may be vulnerable to a local privilege escalation attack when using forward files. Sun did not increase the version number of their sendmail when patching Solaris 7 and 8, so this might be a false positive on these platforms. An attacke...

CVE-2003-0108

...

CVE-2003-0052

parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to list arbitrary directories...

CVE-2003-0054

Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to the rtsp DESCRIBE method, which is inserted into a log file and executed when the log is viewed usin...

CVE-2003-0103

Format string vulnerability in Nokia 6210 handset allows remote attackers to cause a denial of service crash, lockup, or restart via a Multi-Part vCard with fields containing a large number of format string specifiers...

CVE-2003-0108

isakmpsubprint in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service CPU consumption via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop...

CVE-2003-0120

adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a predictable name...

CVE-2003-0051

parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path of the server's installation path via a NULL file parameter...

CVE-2003-0107

Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code...