GNU screen buffer overflow

Summary ------- Buffer overflow in GNU screen allows privilege escalation for local users. Usually screen is installed either setgid-utmp or setuid-root. It also has some potential for remote attacks or getting control of another user's screen. The problem is that you have to transfer around 2-3...

CVE-2003-0943

CVE-2003-0943 affects SAP DB web-tools prior to 7.4.03.30. The default-enabled services (waecho, Web SQL Interface websql, Web Database Manager webdbm) can enable remote attackers to view potentially sensitive information or redirect attacks against internal databases. Connected sources also desc...

CVE-2003-0545

Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding...

CVE-2003-0925

Buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed GTP MSISDN string...

CVE-2003-1189

Unknown vulnerability in Nokia IPSO 3.7, configured as IP Clusters, allows remote attackers to cause a denial of service via unknown attack vectors...

CVE-2003-0733

Multiple cross-site scripting XSS vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary web script and steal authentication credentials via 1 a forward instruction to the Servlet container...

CVE-2003-0864

Buffer overflow in mjoin in channel.c for IRCnet IRCD 2.10.x to 2.10.3p3 allows remote attackers to cause a denial of service...

[SECURITY] [DSA 394-1] New openssl095 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 394-1 [email protected] http://www.debian.org/security/ Martin Schulze October 11th, 2003 http://www.debian.org/security/faq -...

Mambo Site Server 4.0.14 - 'banners.php?bid' SQL Injection

source: https://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous e-mail to arbitrary users. The...

CVE-2003-0773

saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANENETINIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf...

CVE-2003-0775

saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service memory consumption or crash...

Gordano Messaging Suite - Multiple Vulnerabilities

Release Date: 09/04/2003 TITLE ===== Gordano Messaging Suite – Multiple Vulnerabilities DESCRIPTION =========== “Gordano Messaging Suite is the powerful messaging server running on Windows, Linux, Solaris and AIX. It is being used by over twenty four thousand customers, in more than ninety...

FloosieTek FTGatePro 1.22 - Mail Server Full Path Disclosure

source: https://www.securityfocus.com/bid/8527/info FloosieTek FTGatePro Mail Server may disclose its installation path to remote attackers. This information could be useful when mounting further attacks against the system. This issue exists in the web administrative interface, which listens on...

CVE-2003-0468

Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate...

CVE-2001-1410

Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering...

CVE-2003-0590

Cross-site scripting XSS vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon imagesubject field...

D-Link 704p Broadband Router Remote / Local DoS

02 August 2003 Hardware: D-Link 704p Vulnerability: Multiple Local/Remote see below Warning Level: Moderate Description: This small advisory is on the D-Link 704p router with firmware version 2.70. The router is a small 4 port DSL/CABLE router. Earlier this year I made a small post on BUGTRAQ abo...

[SECURITY] [DSA-365-1] New phpgroupware package fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 365-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 5th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0468

Summary of the CVE-2003-0468 family (Postfix) : The issue affects Postfix versions up to 1.1.11 (and variants discussed in 1.1.x line) and enables a remote attacker to perform bounce-scans or use the MTA as a DoS/DDoS tool by causing SMTP connections to target hosts via crafted addresses. Public ...

[SECURITY] [DSA-361-1] New kdelibs packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 361-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 1st, 2003 http://www.debian.org/security/faq -...