CVEs published in February 2003

42 vulnerabilities, 5 critical, 0 exploited.

• sun solaris, sunos +1 more The FTP client for Solaris 2.6, 7, and 8 with the debug (-d) flag enabled displays the user... CVE-2003-1078 7.5 HighFebruary 28, 2003
• mhc-utils adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite... CVE-2003-0120 Fix available 1.2 LowFebruary 28, 2003
• lbl tcpdump isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of... CVE-2003-0108 Public exploitFix available EPSS 11.3% 5.0 MediumFebruary 27, 2003
• usermin, webmin, engardelinux guardian digital webtool +2 more miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle... CVE-2003-0101 Public exploitFix available EPSS 15.5% 10.0 HighFebruary 26, 2003
• apc apcupsd Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers... CVE-2003-0099 Fix available 7.2 HighFebruary 26, 2003
• apcupsd, debian linux +1 more Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers... CVE-2003-0098 Fix available 10.0 HighFebruary 26, 2003
• apple mac os x, mac os x server +1 more Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other... CVE-2003-0049 7.5 HighFebruary 26, 2003
• openssl, freebsd, openbsd +2 more ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a... CVE-2003-0078 Public exploitFix available EPSS 13.7% 5.0 MediumFebruary 24, 2003
• oracle database server, oracle8i, oracle9i +2 more Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow... CVE-2003-0096 EPSS 15.9% 9.0 HighFebruary 21, 2003
• microsoft internet explorer, ie +1 more The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types... CVE-2003-1328 Public exploit EPSS 38.9% 7.5 HighFebruary 19, 2003
• microsoft internet explorer, ie +1 more Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain... CVE-2003-1326 EPSS 16.3% 7.5 HighFebruary 19, 2003
• bladeenc Integer signedness error in the myFseek function of samplein.c for Blade encoder (BladeEnc) 0.94... CVE-2003-0075 7.5 HighFebruary 19, 2003
• oracle mysql Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access... CVE-2003-0073 Fix available 5.0 MediumFebruary 19, 2003
• eset software nod32 antivirus Buffer overflow in Eset Software NOD32 for UNIX before 1.013 allows local users to execute... CVE-2003-0062 7.2 HighFebruary 19, 2003
• mit kerberos 5 Unknown vulnerability in the chk_trans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5... CVE-2003-0059 Fix available 7.5 HighFebruary 19, 2003
• mit kerberos 5, sun enterprise authentication mechanism, solaris +1 more +3 more MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers... CVE-2003-0058 Fix available 5.0 MediumFebruary 19, 2003
• redhat linux uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges,... CVE-2003-0019 Public exploit 7.2 HighFebruary 19, 2003
• linux kernel Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which... CVE-2003-0018 Fix available 3.6 LowFebruary 19, 2003
• microsoft windows xp Buffer overflow in the Windows Redirector function in Microsoft Windows XP allows local users to... CVE-2003-0004 Public exploit 7.2 HighFebruary 19, 2003
• redhat linux The default configuration of the pam_xauth module forwards MIT-Magic-Cookies to new X sessions,... CVE-2002-1160 7.2 HighFebruary 19, 2003
• mit kerberos 5 Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote... CVE-2002-0036 5.0 MediumFebruary 19, 2003
• sun solaris, sunos +1 more Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for... CVE-2003-1079 5.0 MediumFebruary 18, 2003
• No product listed Unknown vulnerability in mail for Solaris 2.6 through 9 allows local users to read the email of... CVE-2003-1080 1.2 LowFebruary 11, 2003
• dcgui, qt-dcgui +1 more Unknown vulnerability in the directory parser for Direct Connect 4 Linux (dcgui) before 0.2.2... CVE-2003-0076 6.4 MediumFebruary 11, 2003
• pingtel xpressa The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows... CVE-2002-0669 5.0 MediumFebruary 11, 2003
• w3m w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which... CVE-2002-1348 Fix available 5.0 MediumFebruary 11, 2003
• apache tomcat Jakarta Tomcat Denial of Service vulnerability CVE-2003-0045 Fix available 5.0 MediumFebruary 7, 2003
• sun solaris, sunos +1 more Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service... CVE-2003-0027 EPSS 25.7% 5.0 MediumFebruary 7, 2003
• apache http server Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via... CVE-2003-0017 5.0 MediumFebruary 7, 2003
• apache http server Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows... CVE-2003-0016 EPSS 17.8% 7.5 HighFebruary 7, 2003
• microsoft outlook Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1... CVE-2003-0007 5.0 MediumFebruary 7, 2003
• microsoft windows 2000, windows nt, windows xp +1 more +3 more Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal... CVE-2003-0003 Public exploit EPSS 43.4% 7.5 HighFebruary 7, 2003
• microsoft content management server Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content... CVE-2003-0002 Public exploit EPSS 23.3% 6.8 MediumFebruary 7, 2003
• peoplesoft peopletools The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft... CVE-2002-1252 5.0 MediumFebruary 7, 2003
• celestial software absolutetelnet Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary... CVE-2003-1090 Public exploit EPSS 11.6% 10.0 HighFebruary 6, 2003
• plptools Format string vulnerability in mpmain.c for plpnfsd of the plptools package allows remote... CVE-2003-0074 Fix available 7.2 HighFebruary 5, 2003
• mit kerberos 5 Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center... CVE-2003-0060 Fix available 7.5 HighFebruary 1, 2003
• slocate Buffer overflow in secure locate (slocate) before 2.7 allows local users to execute arbitrary... CVE-2003-0056 Public exploitFix available 7.2 HighFebruary 1, 2003
• putty PuTTY 0.53b and earlier does not clear logon credentials from memory, including plaintext... CVE-2003-0048 Fix available 4.6 MediumFebruary 1, 2003
• van dyke technologies entunnel, securecrt, securefx +2 more SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3)... CVE-2003-0047 4.6 MediumFebruary 1, 2003
• celestial software absolutetelnet AbsoluteTelnet SSH2 client does not clear logon credentials from memory, including plaintext... CVE-2003-0046 4.6 MediumFebruary 1, 2003
• mit kerberos ftp client, mandrakesoft mandrake linux, mandrake multi network firewall +1 more +3 more Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in... CVE-2003-0041 10.0 HighFebruary 1, 2003