CVEs published in March 2003

199 vulnerabilities, 18 critical, 0 exploited.

• martin bauer gbook index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative... CVE-2002-1560 Public exploit EPSS 10.3% 10.0 HighMarch 31, 2003
• novell edirectory Novell eDirectory (eDir) 8.6.2 and Netware 5.1 eDir 85.x allows users with expired passwords to... CVE-2002-1552 7.5 HighMarch 31, 2003
• ibm aix dump_smutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on... CVE-2002-1550 4.6 MediumMarch 31, 2003
• light httpd httpd Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via... CVE-2002-1549 Public exploit EPSS 11.2% 7.5 HighMarch 31, 2003
• ibm aix Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to... CVE-2002-1548 7.2 HighMarch 31, 2003
• juniper netscreen screenos Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of... CVE-2002-1547 5.0 MediumMarch 31, 2003
• netbsd Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via... CVE-2002-1543 4.6 MediumMarch 31, 2003
• working resources inc. badblue BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via... CVE-2002-1541 7.5 HighMarch 31, 2003
• symantec norton antivirus The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x... CVE-2002-1540 7.2 HighMarch 31, 2003
• acuma acusend Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the... CVE-2002-1538 5.0 MediumMarch 31, 2003
• phpbb group phpbb admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly... CVE-2002-1537 10.0 HighMarch 31, 2003
• macromedia flash player Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf... CVE-2002-1534 5.0 MediumMarch 31, 2003
• surfcontrol superscout email filter The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote... CVE-2002-1532 5.0 MediumMarch 31, 2003
• surfcontrol superscout email filter The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote... CVE-2002-1531 5.0 MediumMarch 31, 2003
• surfcontrol superscout email filter The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users... CVE-2002-1530 Public exploit 5.0 MediumMarch 31, 2003
• surfcontrol superscout email filter Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface ... CVE-2002-1529 Public exploit 4.3 MediumMarch 31, 2003
• ibm lotus domino web server Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of... CVE-2003-0181 5.0 MediumMarch 29, 2003
• ibm lotus domino web server Lotus Domino Web Server (nhttp.exe) before 6.0.1 allows remote attackers to cause a denial of... CVE-2003-0180 5.0 MediumMarch 29, 2003
• ibm lotus domino web server, lotus notes client +1 more Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows... CVE-2003-0179 7.5 HighMarch 29, 2003
• ibm lotus domino web server Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause... CVE-2003-0178 EPSS 14.9% 10.0 HighMarch 29, 2003
• php Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other... CVE-2003-0172 Public exploit EPSS 19.0% 7.5 HighMarch 29, 2003
• gnome eog Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via... CVE-2003-0165 Public exploitFix available 4.6 MediumMarch 29, 2003
• realnetworks realone player, realplayer, realone enterprise desktop +2 more The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8... CVE-2003-0141 5.1 MediumMarch 29, 2003
• sun solaris Unknown vulnerability in newtask for Solaris 9 allows local users to gain root privileges. CVE-2003-1074 7.2 HighMarch 28, 2003
• apache http server Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape... CVE-2003-0083 Fix available EPSS 19.2% 5.0 MediumMarch 28, 2003
• mutt Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and... CVE-2003-0167 Fix available 7.5 HighMarch 28, 2003
• php Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to... CVE-2003-0166 Public exploit EPSS 14.1% 7.5 HighMarch 27, 2003
• symantec enterprise firewall The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern... CVE-2003-0106 7.5 HighMarch 27, 2003
• ecartis Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset... CVE-2003-0162 Fix available 7.5 HighMarch 26, 2003
• squirrelmail Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.2.11 allow remote... CVE-2003-0160 5.8 MediumMarch 26, 2003
• ethereal group ethereal Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote... CVE-2003-0159 7.5 HighMarch 26, 2003
• microsoft windows 2000, windows nt, windows xp +1 more +3 more The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to... CVE-2002-1561 Public exploit EPSS 37.7% 5.0 MediumMarch 26, 2003
• adobe acrobat, acrobat reader +1 more The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of... CVE-2002-0030 4.6 MediumMarch 26, 2003
• mit kerberos, kerberos 5 +1 more The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote,... CVE-2003-0082 Fix available 5.0 MediumMarch 24, 2003
• mit kerberos, kerberos 5 +1 more The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote,... CVE-2003-0072 Fix available 5.0 MediumMarch 24, 2003
• bea weblogic server BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain... CVE-2003-0151 7.5 HighMarch 21, 2003
• oracle mysql MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root... CVE-2003-0150 Public exploit EPSS 44.8% 9.0 HighMarch 21, 2003
• mutt Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other... CVE-2003-0140 Fix available 7.5 HighMarch 21, 2003
• mit kerberos Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5... CVE-2003-0139 Fix available 7.5 HighMarch 21, 2003
• mit kerberos Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an... CVE-2003-0138 Fix available 7.5 HighMarch 21, 2003
• openssl The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote... CVE-2003-0131 Fix available 7.5 HighMarch 21, 2003
• ximian evolution The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier... CVE-2003-0130 Public exploitFix available EPSS 10.3% 5.0 MediumMarch 21, 2003
• ximian evolution Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of... CVE-2003-0129 Public exploitFix available EPSS 11.6% 5.0 MediumMarch 21, 2003
• ximian evolution The try_uudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and... CVE-2003-0128 Public exploitFix available EPSS 16.5% 5.0 MediumMarch 21, 2003
• gnu glibc, cray unicos, freebsd +10 more +12 more Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR ... CVE-2003-0028 Fix available EPSS 15.0% 7.5 HighMarch 21, 2003
• microsoft isa server Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet... CVE-2003-0011 EPSS 13.3% 5.0 MediumMarch 21, 2003
• microsoft windows 2000, windows 2000 terminal services, windows 98 +4 more +6 more Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript ... CVE-2003-0010 EPSS 23.9% 7.5 HighMarch 21, 2003
• mozilla bonsai bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page... CVE-2003-0155 Fix available 5.0 MediumMarch 21, 2003
• mozilla bonsai Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote... CVE-2003-0154 Public exploitFix available 6.8 MediumMarch 21, 2003
• mozilla bonsai bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages... CVE-2003-0153 Public exploitFix available 5.0 MediumMarch 21, 2003
• Show olderLoading…