| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2003-0803 | 0.03 | — | 0.06 | Oct 6, 2003 | Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user. | |||
| CVE-2003-0805 | 0.03 | — | 0.05 | Oct 6, 2003 | Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command, and (2) the GSisText function, which calculates the view-type. | |||
| CVE-2003-0826 | 0.04 | — | 0.12 | Oct 6, 2003 | lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack. | |||
| CVE-2003-0827 | 0.00 | — | 0.01 | Oct 6, 2003 | The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service (crash) via a long packet to UDP port 523. | |||
| CVE-2003-1053 | 0.00 | — | 0.01 | Oct 3, 2003 | Multiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long (1) -KCONV command line option or (2) XSHISENLIB environment variable. | |||
| CVE-2003-0693 | 0.00 | — | 0.10 | Sep 22, 2003 | A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695. | |||
| CVE-2003-0722 | 0.10 | — | 0.88 | Sep 22, 2003 | The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets. | |||
| CVE-2003-0768 | 0.01 | — | 0.13 | Sep 22, 2003 | Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null character in the beginning of a tag name. | |||
| CVE-2003-0769 | 0.03 | — | 0.03 | Sep 22, 2003 | Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attackers to insert arbitrary web script and HTML via the message field. | |||
| CVE-2003-0770 | 0.04 | — | 0.11 | Sep 22, 2003 | FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement. | |||
| CVE-2003-0771 | 0.00 | — | 0.00 | Sep 22, 2003 | Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does. | |||
| CVE-2003-0772 | 0.09 | — | 0.72 | Sep 22, 2003 | Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments. | |||
| CVE-2003-0773 | 0.00 | — | 0.02 | Sep 22, 2003 | saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf. | |||
| CVE-2003-0774 | 0.00 | — | 0.02 | Sep 22, 2003 | saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service (segmentation fault) when invalid memory is accessed. | |||
| CVE-2003-0775 | 0.00 | — | 0.02 | Sep 22, 2003 | saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service (memory consumption or crash). | |||
| CVE-2003-0776 | 0.00 | — | 0.02 | Sep 22, 2003 | saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences. | |||
| CVE-2003-0777 | 0.00 | — | 0.02 | Sep 22, 2003 | saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service (segmentation fault). | |||
| CVE-2003-0778 | 0.00 | — | 0.02 | Sep 22, 2003 | saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow attackers to cause a denial of service (memory consumption). | |||
| CVE-2003-0779 | 0.00 | — | 0.01 | Sep 22, 2003 | SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string. | |||
| CVE-2003-0780 | 0.09 | — | 0.75 | Sep 22, 2003 | Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field. | |||
| CVE-2002-1352 | 0.00 | — | 0.01 | Sep 17, 2003 | Per Magne Knutsen's CartMan shopping cart (cartman.php) 1.04 and earlier allows remote attackers to modify product prices by changing the price parameter. | |||
| CVE-2003-0528 | 0.03 | — | 0.38 | Sep 17, 2003 | Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 (Blaster/Nachi)… | |||
| CVE-2003-0541 | 0.00 | — | 0.03 | Sep 17, 2003 | gtkhtml before 1.1.10, as used in Evolution, allows remote attackers to cause a denial of service (crash) via a malformed message that causes a null pointer dereference. | |||
| CVE-2003-0703 | 0.00 | — | 0.00 | Sep 17, 2003 | KisMAC before 0.05d trusts user-supplied variables to load arbitrary kernels or kernel modules, which allows local users to gain privileges via the $DRIVER_KEXT environment variable as used in (1) viha_driver.sh, (2) macjack_load.sh, or (3) airojack_load.sh, or (4) via "similar… | |||
| CVE-2003-0704 | 0.00 | — | 0.00 | Sep 17, 2003 | KisMAC before 0.05d trusts user-supplied variables when chown'ing files or directories, which allows local users to gain privileges via the $DRIVER_KEXT environment variable in (1) viha_driver.sh, (2) macjack_load.sh, (3) airojack_load.sh, (4) setuid_enable.sh, (5)… | |||
| CVE-2003-0705 | 0.03 | — | 0.05 | Sep 17, 2003 | Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code. | |||
| CVE-2003-0706 | 0.03 | — | 0.03 | Sep 17, 2003 | Unknown vulnerability in mah-jong 1.5.6 and earlier allows remote attackers to cause a denial of service (tight loop). | |||
| CVE-2003-0715 | 0.03 | — | 0.37 | Sep 17, 2003 | Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than… | |||
| CVE-2003-0720 | 0.04 | — | 0.13 | Sep 17, 2003 | Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type. | |||
| CVE-2003-0721 | 0.00 | — | 0.04 | Sep 17, 2003 | Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array access using a negative number. | |||
| CVE-2003-0760 | 0.03 | — | 0.03 | Sep 17, 2003 | Blubster 2.5 allows remote attackers to cause a denial of service (crash) via a flood of connections to UDP port 701. | |||
| CVE-2003-0761 | 0.00 | — | 0.04 | Sep 17, 2003 | Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP) protocol implementation for Asterisk releases before August 15, 2003, allows remote attackers to execute arbitrary code via certain (1) MESSAGE or (2) INFO requests. | |||
| CVE-2003-0762 | 0.04 | — | 0.08 | Sep 17, 2003 | Buffer overflow in (1) foxweb.dll and (2) foxweb.exe of Foxweb 2.5 allows remote attackers to execute arbitrary code via a long URL (PATH_INFO value). | |||
| CVE-2003-0763 | 0.03 | — | 0.03 | Sep 17, 2003 | Cross-site scripting (XSS) vulnerability in Escapade Scripting Engine (ESP) allows remote attackers to inject arbitrary script via the method parameter, as demonstrated using the PAGE parameter. | |||
| CVE-2003-0764 | 0.00 | — | 0.01 | Sep 17, 2003 | Escapade Scripting Engine (ESP) allows remote attackers to obtain sensitive path information via a malformed request, which leaks the information in an error message, as demonstrated using the PAGE parameter. | |||
| CVE-2003-0765 | 0.04 | — | 0.07 | Sep 17, 2003 | The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value. | |||
| CVE-2003-0766 | 0.04 | — | 0.07 | Sep 17, 2003 | Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious servers to execute arbitrary code via (1) a long FTP banner, (2) a long response to a USER command, or (3) a long response to a PASS command. | |||
| CVE-2003-0767 | 0.04 | — | 0.09 | Sep 17, 2003 | Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and 0.27 and earlier for Linux and BSD, allows remote attackers to cause a denial of service and execute arbitrary code via a client request with a large length… | |||
| CVE-2003-1081 | 0.00 | — | 0.02 | Sep 9, 2003 | Aspppls for Solaris 8 allows local users to overwrite arbitrary files via a symlink attack on the .asppp.fifo temporary file. | |||
| CVE-2003-0644 | 0.00 | — | 0.00 | Sep 7, 2003 | Kdbg 1.1.0 through 1.2.8 does not check permissions of the .kdbgrc file, which allows local users to execute arbitrary commands. | |||
| CVE-2002-1566 | 0.03 | — | 0.03 | Aug 27, 2003 | netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284. | |||
| CVE-2003-0148 | 0.00 | — | 0.01 | Aug 27, 2003 | The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that (1) obtain the database administrator username and encrypted password in a configuration file from the ePO server using a… | |||
| CVE-2003-0149 | 0.00 | — | 0.04 | Aug 27, 2003 | Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters. | |||
| CVE-2003-0187 | 0.00 | — | 0.02 | Aug 27, 2003 | The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows remote attackers to cause a denial of service (resource consumption) due to an inconsistency with Linux 2.4.20's support of linked lists,… | |||
| CVE-2003-0230 | 0.00 | — | 0.02 | Aug 27, 2003 | Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability. | |||
| CVE-2003-0231 | 0.06 | — | 0.36 | Aug 27, 2003 | Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe. | |||
| CVE-2003-0232 | 0.03 | — | 0.04 | Aug 27, 2003 | Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow. | |||
| CVE-2003-0346 | 0.03 | — | 0.33 | Aug 27, 2003 | Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with (1) large length for a Text or Copyright string, or (2) a large number of tracks, which leads to a heap-based buffer… | |||
| CVE-2003-0353 | 0.02 | — | 0.21 | Aug 27, 2003 | Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434. | |||
| CVE-2003-0421 | 0.00 | — | 0.03 | Aug 27, 2003 | Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0502. |
- CVE-2003-0803Oct 6, 2003risk 0.03cvss —epss 0.06
Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user.
- CVE-2003-0805Oct 6, 2003risk 0.03cvss —epss 0.05
Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command, and (2) the GSisText function, which calculates the view-type.
- CVE-2003-0826Oct 6, 2003risk 0.04cvss —epss 0.12
lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack.
- CVE-2003-0827Oct 6, 2003risk 0.00cvss —epss 0.01
The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service (crash) via a long packet to UDP port 523.
- CVE-2003-1053Oct 3, 2003risk 0.00cvss —epss 0.01
Multiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long (1) -KCONV command line option or (2) XSHISENLIB environment variable.
- CVE-2003-0693Sep 22, 2003risk 0.00cvss —epss 0.10
A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.
- CVE-2003-0722Sep 22, 2003risk 0.10cvss —epss 0.88
The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.
- CVE-2003-0768Sep 22, 2003risk 0.01cvss —epss 0.13
Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null character in the beginning of a tag name.
- CVE-2003-0769Sep 22, 2003risk 0.03cvss —epss 0.03
Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attackers to insert arbitrary web script and HTML via the message field.
- CVE-2003-0770Sep 22, 2003risk 0.04cvss —epss 0.11
FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement.
- CVE-2003-0771Sep 22, 2003risk 0.00cvss —epss 0.00
Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does.
- CVE-2003-0772Sep 22, 2003risk 0.09cvss —epss 0.72
Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments.
- CVE-2003-0773Sep 22, 2003risk 0.00cvss —epss 0.02
saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf.
- CVE-2003-0774Sep 22, 2003risk 0.00cvss —epss 0.02
saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service (segmentation fault) when invalid memory is accessed.
- CVE-2003-0775Sep 22, 2003risk 0.00cvss —epss 0.02
saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service (memory consumption or crash).
- CVE-2003-0776Sep 22, 2003risk 0.00cvss —epss 0.02
saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.
- CVE-2003-0777Sep 22, 2003risk 0.00cvss —epss 0.02
saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service (segmentation fault).
- CVE-2003-0778Sep 22, 2003risk 0.00cvss —epss 0.02
saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow attackers to cause a denial of service (memory consumption).
- CVE-2003-0779Sep 22, 2003risk 0.00cvss —epss 0.01
SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string.
- CVE-2003-0780Sep 22, 2003risk 0.09cvss —epss 0.75
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.
- CVE-2002-1352Sep 17, 2003risk 0.00cvss —epss 0.01
Per Magne Knutsen's CartMan shopping cart (cartman.php) 1.04 and earlier allows remote attackers to modify product prices by changing the price parameter.
- CVE-2003-0528Sep 17, 2003risk 0.03cvss —epss 0.38
Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 (Blaster/Nachi)…
- CVE-2003-0541Sep 17, 2003risk 0.00cvss —epss 0.03
gtkhtml before 1.1.10, as used in Evolution, allows remote attackers to cause a denial of service (crash) via a malformed message that causes a null pointer dereference.
- CVE-2003-0703Sep 17, 2003risk 0.00cvss —epss 0.00
KisMAC before 0.05d trusts user-supplied variables to load arbitrary kernels or kernel modules, which allows local users to gain privileges via the $DRIVER_KEXT environment variable as used in (1) viha_driver.sh, (2) macjack_load.sh, or (3) airojack_load.sh, or (4) via "similar…
- CVE-2003-0704Sep 17, 2003risk 0.00cvss —epss 0.00
KisMAC before 0.05d trusts user-supplied variables when chown'ing files or directories, which allows local users to gain privileges via the $DRIVER_KEXT environment variable in (1) viha_driver.sh, (2) macjack_load.sh, (3) airojack_load.sh, (4) setuid_enable.sh, (5)…
- CVE-2003-0705Sep 17, 2003risk 0.03cvss —epss 0.05
Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code.
- CVE-2003-0706Sep 17, 2003risk 0.03cvss —epss 0.03
Unknown vulnerability in mah-jong 1.5.6 and earlier allows remote attackers to cause a denial of service (tight loop).
- CVE-2003-0715Sep 17, 2003risk 0.03cvss —epss 0.37
Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than…
- CVE-2003-0720Sep 17, 2003risk 0.04cvss —epss 0.13
Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type.
- CVE-2003-0721Sep 17, 2003risk 0.00cvss —epss 0.04
Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array access using a negative number.
- CVE-2003-0760Sep 17, 2003risk 0.03cvss —epss 0.03
Blubster 2.5 allows remote attackers to cause a denial of service (crash) via a flood of connections to UDP port 701.
- CVE-2003-0761Sep 17, 2003risk 0.00cvss —epss 0.04
Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP) protocol implementation for Asterisk releases before August 15, 2003, allows remote attackers to execute arbitrary code via certain (1) MESSAGE or (2) INFO requests.
- CVE-2003-0762Sep 17, 2003risk 0.04cvss —epss 0.08
Buffer overflow in (1) foxweb.dll and (2) foxweb.exe of Foxweb 2.5 allows remote attackers to execute arbitrary code via a long URL (PATH_INFO value).
- CVE-2003-0763Sep 17, 2003risk 0.03cvss —epss 0.03
Cross-site scripting (XSS) vulnerability in Escapade Scripting Engine (ESP) allows remote attackers to inject arbitrary script via the method parameter, as demonstrated using the PAGE parameter.
- CVE-2003-0764Sep 17, 2003risk 0.00cvss —epss 0.01
Escapade Scripting Engine (ESP) allows remote attackers to obtain sensitive path information via a malformed request, which leaks the information in an error message, as demonstrated using the PAGE parameter.
- CVE-2003-0765Sep 17, 2003risk 0.04cvss —epss 0.07
The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value.
- CVE-2003-0766Sep 17, 2003risk 0.04cvss —epss 0.07
Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious servers to execute arbitrary code via (1) a long FTP banner, (2) a long response to a USER command, or (3) a long response to a PASS command.
- CVE-2003-0767Sep 17, 2003risk 0.04cvss —epss 0.09
Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and 0.27 and earlier for Linux and BSD, allows remote attackers to cause a denial of service and execute arbitrary code via a client request with a large length…
- CVE-2003-1081Sep 9, 2003risk 0.00cvss —epss 0.02
Aspppls for Solaris 8 allows local users to overwrite arbitrary files via a symlink attack on the .asppp.fifo temporary file.
- CVE-2003-0644Sep 7, 2003risk 0.00cvss —epss 0.00
Kdbg 1.1.0 through 1.2.8 does not check permissions of the .kdbgrc file, which allows local users to execute arbitrary commands.
- CVE-2002-1566Aug 27, 2003risk 0.03cvss —epss 0.03
netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.
- CVE-2003-0148Aug 27, 2003risk 0.00cvss —epss 0.01
The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that (1) obtain the database administrator username and encrypted password in a configuration file from the ePO server using a…
- CVE-2003-0149Aug 27, 2003risk 0.00cvss —epss 0.04
Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters.
- CVE-2003-0187Aug 27, 2003risk 0.00cvss —epss 0.02
The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows remote attackers to cause a denial of service (resource consumption) due to an inconsistency with Linux 2.4.20's support of linked lists,…
- CVE-2003-0230Aug 27, 2003risk 0.00cvss —epss 0.02
Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability.
- CVE-2003-0231Aug 27, 2003risk 0.06cvss —epss 0.36
Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.
- CVE-2003-0232Aug 27, 2003risk 0.03cvss —epss 0.04
Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow.
- CVE-2003-0346Aug 27, 2003risk 0.03cvss —epss 0.33
Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with (1) large length for a Text or Copyright string, or (2) a large number of tracks, which leads to a heap-based buffer…
- CVE-2003-0353Aug 27, 2003risk 0.02cvss —epss 0.21
Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434.
- CVE-2003-0421Aug 27, 2003risk 0.00cvss —epss 0.03
Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0502.