| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2003-0480 | 0.00 | — | 0.00 | Aug 7, 2003 | VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipulation." | |||
| CVE-2003-0481 | 0.03 | — | 0.03 | Aug 7, 2003 | Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated using the msg parameter to file_select.php. | |||
| CVE-2003-0482 | 0.04 | — | 0.07 | Aug 7, 2003 | TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly accessing the uploaded code via a request to the repository containing the code. | |||
| CVE-2003-0483 | 0.03 | — | 0.04 | Aug 7, 2003 | Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via (1) the member parameter to member.php or (2) the action parameter to buddy.php. | |||
| CVE-2003-0484 | 0.00 | — | 0.01 | Aug 7, 2003 | Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the topic_id parameter. | |||
| CVE-2003-0485 | 0.00 | — | 0.01 | Aug 7, 2003 | Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, invalid data type. | |||
| CVE-2003-0486 | 0.00 | — | 0.02 | Aug 7, 2003 | SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter. | |||
| CVE-2003-0487 | 0.04 | — | 0.11 | Aug 7, 2003 | Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parameter in the do_subscribe module, (2) a long folder parameter in the add_acl module, (3) a long… | |||
| CVE-2003-0488 | 0.04 | — | 0.07 | Aug 7, 2003 | Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1) the add_name parameter in the add_acl module, or (2) the alias parameter in the do_map module. | |||
| CVE-2003-0489 | 0.00 | — | 0.00 | Aug 7, 2003 | tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute. | |||
| CVE-2003-0490 | 0.00 | — | 0.00 | Aug 7, 2003 | The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical directories and files with world-writable permissions, which allows local users to gain privileges as other users by replacing programs with malicious code. | |||
| CVE-2003-0491 | 0.00 | — | 0.02 | Aug 7, 2003 | The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file. | |||
| CVE-2003-0492 | 0.03 | — | 0.04 | Aug 7, 2003 | Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web script via the Search parameter. | |||
| CVE-2003-0493 | 0.00 | — | 0.02 | Aug 7, 2003 | Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after obtaining a valid session ID. | |||
| CVE-2003-0494 | 0.00 | — | 0.04 | Aug 7, 2003 | password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modified member id. | |||
| CVE-2003-0495 | 0.03 | — | 0.04 | Aug 7, 2003 | Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item. | |||
| CVE-2003-0497 | 0.03 | — | 0.01 | Aug 7, 2003 | Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs. | |||
| CVE-2003-0498 | 0.00 | — | 0.00 | Aug 7, 2003 | Caché Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows local users to execute arbitrary code by adding server-side scripts that are executed with root privileges. | |||
| CVE-2003-0499 | 0.00 | — | 0.00 | Aug 7, 2003 | Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations. | |||
| CVE-2003-0500 | 0.04 | — | 0.18 | Aug 7, 2003 | SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name. | |||
| CVE-2003-0501 | 0.03 | — | 0.01 | Aug 7, 2003 | The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries. | |||
| CVE-2003-0503 | 0.01 | — | 0.07 | Aug 7, 2003 | Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service or execute arbitrary code via a long third argument. | |||
| CVE-2003-0504 | 0.00 | — | 0.01 | Aug 7, 2003 | Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware 0.9.14.003 (aka webdistro) allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to index.php in the addressbook module. | |||
| CVE-2003-0505 | 0.01 | — | 0.14 | Aug 7, 2003 | Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (dot dot) sequences in a file transfer request. | |||
| CVE-2003-0506 | 0.01 | — | 0.11 | Aug 7, 2003 | Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malformed packets, as demonstrated via the chat conversation. | |||
| CVE-2003-0507 | 0.02 | — | 0.27 | Aug 7, 2003 | Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service (reboot) and possibly execute arbitrary code via an LDAP version 3 search request with a large number of (1) "AND," (2) "OR," and possibly other… | |||
| CVE-2003-0508 | 0.04 | — | 0.07 | Aug 7, 2003 | Buffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader (acroread) 5.0.7 and earlier allows remote attackers to execute arbitrary code via a .pdf file with a long mailto link. | |||
| CVE-2003-0509 | 0.03 | — | 0.06 | Aug 7, 2003 | SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp. | |||
| CVE-2003-0510 | 0.04 | — | 0.07 | Aug 7, 2003 | Format string vulnerability in ezbounce 1.0 through 1.50 allows remote attackers to execute arbitrary code via the "sessions" command. | |||
| CVE-2003-1205 | 0.00 | — | 0.02 | Aug 6, 2003 | Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service (crash) by renaming a file to the "con" MS-DOS device name. | |||
| CVE-2003-0643 | 0.00 | — | 0.00 | Jul 25, 2003 | Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash). | |||
| CVE-2001-1409 | 0.00 | — | 0.00 | Jul 24, 2003 | dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local users to replace or create files in the root file system. | |||
| CVE-2003-0251 | 0.00 | — | 0.03 | Jul 24, 2003 | ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the server, which causes ypserv to block. | |||
| CVE-2003-0348 | 0.02 | — | 0.20 | Jul 24, 2003 | A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the local system via HTML script. | |||
| CVE-2003-0349 | 0.09 | — | 0.83 | Jul 24, 2003 | Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to… | |||
| CVE-2003-0359 | 0.00 | — | 0.00 | Jul 24, 2003 | nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replacing the original binaries with malicious code. | |||
| CVE-2003-0366 | 0.00 | — | 0.01 | Jul 24, 2003 | lyskom-server 2.0.7 and earlier allows unauthenticated users to cause a denial of service (CPU consumption) via a large query. | |||
| CVE-2003-0379 | 0.00 | — | 0.02 | Jul 24, 2003 | Unknown vulnerability in Apple File Service (AFP Server) for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows remote attackers to overwrite arbitrary files. | |||
| CVE-2003-0381 | 0.00 | — | 0.00 | Jul 24, 2003 | Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the noroff script. | |||
| CVE-2003-0388 | 0.03 | — | 0.01 | Jul 24, 2003 | pam_wheel in Linux-PAM 0.78, with the trust option enabled and the use_uid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin() to return a spoofed user name. | |||
| CVE-2003-0389 | 0.00 | — | 0.01 | Jul 24, 2003 | Cross-site scripting (XSS) vulnerability in the secure redirect function of RSA ACE/Agent 5.0 for Windows, and 5.x for Web, allows remote attackers to insert arbitrary web script and possibly cause users to enter a passphrase via a GET request containing the script. | |||
| CVE-2003-0418 | 0.00 | — | 0.03 | Jul 24, 2003 | The Linux 2.0 kernel IP stack does not properly calculate the size of an ICMP citation, which causes it to include portions of unauthorized memory in ICMP error responses. | |||
| CVE-2003-0419 | 0.00 | — | 0.01 | Jul 24, 2003 | SMC Networks Barricade Wireless Cable/DSL Broadband Router SMC7004VWBR allows remote attackers to cause a denial of service via certain packets to PPTP port 1723 on the internal interface. | |||
| CVE-2003-0427 | 0.00 | — | 0.03 | Jul 24, 2003 | Buffer overflow in mikmod 3.1.6 and earlier allows remote attackers to execute arbitrary code via an archive file that contains a file with a long filename. | |||
| CVE-2003-0428 | 0.00 | — | 0.04 | Jul 24, 2003 | Unknown vulnerability in the DCERPC (DCE/RPC) dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (memory consumption) via a certain NDR string. | |||
| CVE-2003-0429 | 0.00 | — | 0.05 | Jul 24, 2003 | The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow. | |||
| CVE-2003-0430 | 0.00 | — | 0.02 | Jul 24, 2003 | The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (crash) via an invalid ASN.1 value. | |||
| CVE-2003-0431 | 0.00 | — | 0.02 | Jul 24, 2003 | The tvb_get_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences. | |||
| CVE-2003-0432 | 0.00 | — | 0.02 | Jul 24, 2003 | Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors. | |||
| CVE-2003-0433 | 0.00 | — | 0.02 | Jul 24, 2003 | Multiple buffer overflows in gnocatan 0.6.1 and earlier allow attackers to execute arbitrary code. |
- CVE-2003-0480Aug 7, 2003risk 0.00cvss —epss 0.00
VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipulation."
- CVE-2003-0481Aug 7, 2003risk 0.03cvss —epss 0.03
Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated using the msg parameter to file_select.php.
- CVE-2003-0482Aug 7, 2003risk 0.04cvss —epss 0.07
TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly accessing the uploaded code via a request to the repository containing the code.
- CVE-2003-0483Aug 7, 2003risk 0.03cvss —epss 0.04
Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via (1) the member parameter to member.php or (2) the action parameter to buddy.php.
- CVE-2003-0484Aug 7, 2003risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the topic_id parameter.
- CVE-2003-0485Aug 7, 2003risk 0.00cvss —epss 0.01
Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, invalid data type.
- CVE-2003-0486Aug 7, 2003risk 0.00cvss —epss 0.02
SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter.
- CVE-2003-0487Aug 7, 2003risk 0.04cvss —epss 0.11
Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parameter in the do_subscribe module, (2) a long folder parameter in the add_acl module, (3) a long…
- CVE-2003-0488Aug 7, 2003risk 0.04cvss —epss 0.07
Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1) the add_name parameter in the add_acl module, or (2) the alias parameter in the do_map module.
- CVE-2003-0489Aug 7, 2003risk 0.00cvss —epss 0.00
tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute.
- CVE-2003-0490Aug 7, 2003risk 0.00cvss —epss 0.00
The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical directories and files with world-writable permissions, which allows local users to gain privileges as other users by replacing programs with malicious code.
- CVE-2003-0491Aug 7, 2003risk 0.00cvss —epss 0.02
The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file.
- CVE-2003-0492Aug 7, 2003risk 0.03cvss —epss 0.04
Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web script via the Search parameter.
- CVE-2003-0493Aug 7, 2003risk 0.00cvss —epss 0.02
Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after obtaining a valid session ID.
- CVE-2003-0494Aug 7, 2003risk 0.00cvss —epss 0.04
password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modified member id.
- CVE-2003-0495Aug 7, 2003risk 0.03cvss —epss 0.04
Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item.
- CVE-2003-0497Aug 7, 2003risk 0.03cvss —epss 0.01
Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs.
- CVE-2003-0498Aug 7, 2003risk 0.00cvss —epss 0.00
Caché Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows local users to execute arbitrary code by adding server-side scripts that are executed with root privileges.
- CVE-2003-0499Aug 7, 2003risk 0.00cvss —epss 0.00
Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations.
- CVE-2003-0500Aug 7, 2003risk 0.04cvss —epss 0.18
SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name.
- CVE-2003-0501Aug 7, 2003risk 0.03cvss —epss 0.01
The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries.
- CVE-2003-0503Aug 7, 2003risk 0.01cvss —epss 0.07
Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service or execute arbitrary code via a long third argument.
- CVE-2003-0504Aug 7, 2003risk 0.00cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware 0.9.14.003 (aka webdistro) allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to index.php in the addressbook module.
- CVE-2003-0505Aug 7, 2003risk 0.01cvss —epss 0.14
Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (dot dot) sequences in a file transfer request.
- CVE-2003-0506Aug 7, 2003risk 0.01cvss —epss 0.11
Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malformed packets, as demonstrated via the chat conversation.
- CVE-2003-0507Aug 7, 2003risk 0.02cvss —epss 0.27
Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service (reboot) and possibly execute arbitrary code via an LDAP version 3 search request with a large number of (1) "AND," (2) "OR," and possibly other…
- CVE-2003-0508Aug 7, 2003risk 0.04cvss —epss 0.07
Buffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader (acroread) 5.0.7 and earlier allows remote attackers to execute arbitrary code via a .pdf file with a long mailto link.
- CVE-2003-0509Aug 7, 2003risk 0.03cvss —epss 0.06
SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.
- CVE-2003-0510Aug 7, 2003risk 0.04cvss —epss 0.07
Format string vulnerability in ezbounce 1.0 through 1.50 allows remote attackers to execute arbitrary code via the "sessions" command.
- CVE-2003-1205Aug 6, 2003risk 0.00cvss —epss 0.02
Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service (crash) by renaming a file to the "con" MS-DOS device name.
- CVE-2003-0643Jul 25, 2003risk 0.00cvss —epss 0.00
Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash).
- CVE-2001-1409Jul 24, 2003risk 0.00cvss —epss 0.00
dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local users to replace or create files in the root file system.
- CVE-2003-0251Jul 24, 2003risk 0.00cvss —epss 0.03
ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the server, which causes ypserv to block.
- CVE-2003-0348Jul 24, 2003risk 0.02cvss —epss 0.20
A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the local system via HTML script.
- CVE-2003-0349Jul 24, 2003risk 0.09cvss —epss 0.83
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to…
- CVE-2003-0359Jul 24, 2003risk 0.00cvss —epss 0.00
nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replacing the original binaries with malicious code.
- CVE-2003-0366Jul 24, 2003risk 0.00cvss —epss 0.01
lyskom-server 2.0.7 and earlier allows unauthenticated users to cause a denial of service (CPU consumption) via a large query.
- CVE-2003-0379Jul 24, 2003risk 0.00cvss —epss 0.02
Unknown vulnerability in Apple File Service (AFP Server) for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows remote attackers to overwrite arbitrary files.
- CVE-2003-0381Jul 24, 2003risk 0.00cvss —epss 0.00
Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the noroff script.
- CVE-2003-0388Jul 24, 2003risk 0.03cvss —epss 0.01
pam_wheel in Linux-PAM 0.78, with the trust option enabled and the use_uid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin() to return a spoofed user name.
- CVE-2003-0389Jul 24, 2003risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in the secure redirect function of RSA ACE/Agent 5.0 for Windows, and 5.x for Web, allows remote attackers to insert arbitrary web script and possibly cause users to enter a passphrase via a GET request containing the script.
- CVE-2003-0418Jul 24, 2003risk 0.00cvss —epss 0.03
The Linux 2.0 kernel IP stack does not properly calculate the size of an ICMP citation, which causes it to include portions of unauthorized memory in ICMP error responses.
- CVE-2003-0419Jul 24, 2003risk 0.00cvss —epss 0.01
SMC Networks Barricade Wireless Cable/DSL Broadband Router SMC7004VWBR allows remote attackers to cause a denial of service via certain packets to PPTP port 1723 on the internal interface.
- CVE-2003-0427Jul 24, 2003risk 0.00cvss —epss 0.03
Buffer overflow in mikmod 3.1.6 and earlier allows remote attackers to execute arbitrary code via an archive file that contains a file with a long filename.
- CVE-2003-0428Jul 24, 2003risk 0.00cvss —epss 0.04
Unknown vulnerability in the DCERPC (DCE/RPC) dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (memory consumption) via a certain NDR string.
- CVE-2003-0429Jul 24, 2003risk 0.00cvss —epss 0.05
The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow.
- CVE-2003-0430Jul 24, 2003risk 0.00cvss —epss 0.02
The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (crash) via an invalid ASN.1 value.
- CVE-2003-0431Jul 24, 2003risk 0.00cvss —epss 0.02
The tvb_get_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences.
- CVE-2003-0432Jul 24, 2003risk 0.00cvss —epss 0.02
Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors.
- CVE-2003-0433Jul 24, 2003risk 0.00cvss —epss 0.02
Multiple buffer overflows in gnocatan 0.6.1 and earlier allow attackers to execute arbitrary code.