CVEs published in January 2003

39 vulnerabilities, 2 critical, 0 exploited.

• hypermail Multiple buffer overflows in Hypermail 2 before 2.1.6 allows remote attackers to cause a denial... CVE-2003-0057 Fix available 7.5 HighJanuary 31, 2003
• double precision incorporated courier mta, inter7 courier-imap +1 more SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows... CVE-2003-0040 Fix available 7.5 HighJanuary 30, 2003
• gnu mailman Mailman Cross-site scripting (XSS) vulnerability CVE-2003-0038 Public exploitFix available 4.3 MediumJanuary 29, 2003
• apache tomcat Jakarta Tomcat cross-site scripting (XSS) vulnerability CVE-2003-0044 Fix available 6.8 MediumJanuary 29, 2003
• apache tomcat Tomcat uses trusted privileges when processing web.xml file CVE-2003-0043 Fix available 5.0 MediumJanuary 29, 2003
• apache tomcat Jakarta Tomcat Directory Listing vulnerability CVE-2003-0042 Public exploitFix available EPSS 46.0% 5.0 MediumJanuary 29, 2003
• isc dhcpd ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote... CVE-2003-0039 Fix available 5.0 MediumJanuary 28, 2003
• sun solaris, sunos +1 more Unknown vulnerability in the FTP server (in.ftpd) for Solaris 2.6 through 9 allows remote... CVE-2003-1075 5.0 MediumJanuary 27, 2003
• noffle Buffer overflows in noffle news server 1.0.1 and earlier allow remote attackers to cause a denial... CVE-2003-0037 Fix available 7.5 HighJanuary 27, 2003
• rildo pragana ml85p ml85p, as included in the printer-drivers package for Mandrake Linux, allows local users to... CVE-2003-0036 6.2 MediumJanuary 22, 2003
• robert krawitz escputil Buffer overflow in escputil, as included in the printer-drivers package in Mandrake Linux, allows... CVE-2003-0035 7.2 HighJanuary 22, 2003
• jean-jacques sarton mtink Buffer overflow in the mtink status monitor, as included in the printer-drivers package in... CVE-2003-0034 Public exploit 7.2 HighJanuary 22, 2003
• cvs, freebsd +1 more Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of... CVE-2003-0015 Public exploitFix available EPSS 23.9% 7.5 HighJanuary 21, 2003
• phystech dhcpcd dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via... CVE-2002-1403 Fix available 7.2 HighJanuary 17, 2003
• php Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and before 4.3.0 may allow... CVE-2002-1396 7.5 HighJanuary 17, 2003
• gert doering mgetty faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which... CVE-2002-1392 Fix available 2.1 LowJanuary 17, 2003
• gert doering mgetty Buffer overflow in cnd-program for mgetty before 1.1.29 allows remote attackers to cause a denial... CVE-2002-1391 Fix available 7.5 HighJanuary 17, 2003
• isc dhcpd Multiple stack-based buffer overflows in the error handling routines of the minires library, as... CVE-2003-0026 Fix available EPSS 18.9% 7.5 HighJanuary 16, 2003
• mozilla bugzilla The default .htaccess scripts for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x... CVE-2003-0013 Fix available 7.5 HighJanuary 16, 2003
• mozilla bugzilla The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x... CVE-2003-0012 Fix available 2.1 LowJanuary 16, 2003
• horde imp Multiple SQL injection vulnerabilities in IMP 2.2.8 and earlier allow remote attackers to perform... CVE-2003-0025 Fix available EPSS 28.0% 7.5 HighJanuary 15, 2003
• mcrypt libmcrypt Memory leak in libmcrypt before 2.5.5 allows attackers to cause a denial of service (memory... CVE-2003-0032 Fix available 5.0 MediumJanuary 14, 2003
• mcrypt libmcrypt Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service ... CVE-2003-0031 Fix available 7.5 HighJanuary 14, 2003
• openldap slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows local users to overwrite arbitrary files... CVE-2002-1508 Fix available 1.2 LowJanuary 13, 2003
• bmv gsinterf.c in bmv 1.2 and earlier allows local users to overwrite arbitrary files via a symlink... CVE-2003-0014 Fix available 4.6 MediumJanuary 11, 2003
• apache tomcat Apache Tomcat Source Code Disclosure CVE-2002-1394 Fix available 7.5 HighJanuary 9, 2003
• linux kernel, freebsd, microsoft windows 2000 +2 more +4 more Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes,... CVE-2003-0001 Public exploitFix available EPSS 72.5% 5.0 MediumJanuary 8, 2003
• postgresql Unknown vulnerability in cash_out and possibly other functions in PostgreSQL 7.2.1 and earlier,... CVE-2002-1399 10.0 HighJanuary 8, 2003
• postgresql Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to... CVE-2002-1397 7.5 HighJanuary 8, 2003
• kde Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that... CVE-2002-1393 Fix available 7.5 HighJanuary 8, 2003
• polycom viewstation 128, viewstation 512, viewstation dcp +5 more +7 more The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial... CVE-2002-0630 5.0 MediumJanuary 7, 2003
• polycom viewstation 128, viewstation 512, viewstation dcp +5 more +7 more The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass... CVE-2002-0627 7.5 HighJanuary 7, 2003
• geneweb The daemon for GeneWeb before 4.09 does not properly handle requested paths, which allows remote... CVE-2002-1390 Fix available 5.0 MediumJanuary 7, 2003
• sun solaris, sunos +1 more rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged... CVE-2003-1071 Public exploit 2.1 LowJanuary 3, 2003
• polycom viewstation 128, viewstation 512, viewstation dcp +5 more +7 more The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial... CVE-2002-0629 5.0 MediumJanuary 3, 2003
• polycom viewstation 128, viewstation 512, viewstation dcp +5 more +7 more The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed... CVE-2002-0628 7.5 HighJanuary 3, 2003
• polycom viewstation 128, viewstation 512, viewstation dcp +5 more +7 more Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which... CVE-2002-0626 10.0 HighJanuary 3, 2003
• mhonarc Cross-site scripting (XSS) vulnerability in MHonArc before 2.5.14 allows remote attackers to... CVE-2002-1388 Fix available 4.3 MediumJanuary 2, 2003
• easy software products cups, xpdf +1 more Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18,... CVE-2002-1384 Fix available 7.2 HighJanuary 2, 2003