CVE-2003-0264

CVE-2003-0264...

Kioptrix-Level1-Vulnerability-Analysis

Kioptrix Level 1: Auditoría y Explotación de Vulnerabilidades de Espectro Completo 🏛️ Objetivo Profesional El objetivo era realizar una prueba de penetración estructurada en el entorno Kioptrix Level 1 para lograr el compromiso total de 'root' y documentar estrategias técnicas de remediación...

pentest-writeups

pentest-writeups Writeup de Kioptrix Level 1 - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — Writeup de Pruebas de Penetración Autor: Amirbek Raxmatullayev @americo444 Fecha: 2026-06-17 Plataforma: VulnHub Dificultad: Principiante Objetivo: Obtener acceso root 1. Configuración del Entorno...

etherleak-checker

Comprobador de Vulnerabilidad Etherleak Este script de Python ayuda a detectar la vulnerabilidad Etherleak CVE-2003-0001 en un host objetivo analizando los datos de relleno padding en los paquetes de red. El script utiliza Scapy para enviar varios tipos de solicitudes ICMP, ARP o TCP y comprueba ...

Remote-Buffer-overflow-CVE-2003-0172

Desbordamiento de búfer remoto CVE-2003-0172 root@kitploit: ┌──cyberdesu㉿MSI- └─$ python3 buffer.py usage: exploit.py...

samba-trans2open-exploit-report

Informe de Explotación Samba Trans2Open Este repositorio contiene un recorrido técnico completo de la explotación de la vulnerabilidad Samba Trans2Open CVE-2003-0201 en un entorno Linux virtual. La explotación se realizó con fines educativos y de formación en hacking ético. Contenido del Informe...

SUSE CVE-2003-0098

Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server...

SUSE CVE-2003-0099

Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers to cause a denial of service or execute arbitrary code, related to usage of the vsprintf function...

ruby: Properly initialize the random number generator when forking new process

Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900...

CVE-2003-1276

Netfone.exe of NetTelephone 3.5.6 uses weak encryption for user PIN's and stores user account numbers in plaintext in the HKEYCURRENTUSER\Software\MediaRing.com\SDK\NetTelephone\settings registry key, which could allow local users to gain unauthorized access to NetTelephone accounts...

CVE-2003-1582

Microsoft Internet Information Services IIS 6.0, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response, as demonstrated by injecting XSS sequences, related to an "Inver...

CVE-2003-1595

NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors...

CVE-2003-1568

GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an invalid URL, related to the websSafeUrl function...

CVE-2003-1335

Directory traversal vulnerability in Kai Blankenhorn Bitfolge simple and nice index file aka snif before 1.2.5 allows remote attackers to download files from locations above the snif directory...

CVE-2003-1323

Elm ME+ 2.4 before PL109S, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group via unspecified vectors...

CVE-2003-1521

Sun Java Plug-In 1.4 through 1.4.202 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model...

CVE-2003-1569

GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service daemon crash via an HTTP request with a 1 con, 2 nul, 3 clock$, or 4 config$ device name in a path component, different vectors than CVE-2001-0385...

CVE-2003-1596

NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass intended access restrictions via an FTP session...

CVE-2003-1004

Cisco PIX firewall 6.2.x through 6.2.3, when configured as a VPN Client, allows remote attackers to cause a denial of service dropped IPSec tunnel connection via an IKE Phase I negotiation request to the outside interface of the firewall...

CVE-2003-1246

NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver IPD 1.2 and 1.3 allows local users to create and overwrite arbitrary files via a symlink attack on \winnt\system32\drivers using the subst command...