Skip to content

CVEs published in March 2003

199 vulnerabilities, 18 critical, 0 exploited.

sun one application serverBuffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application...CVE-2002-03877.5 HighMarch 18, 2003
netpbmMultiple vulnerabilities in NetPBM 9.20 and earlier, and possibly other versions, may allow...CVE-2003-0146Fix available7.5 HighMarch 17, 2003
sambaThe code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary...CVE-2003-0086Fix available1.2 LowMarch 15, 2003
samba, hp cifs-9000 server +1 moreBuffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba...CVE-2003-0085Public exploitFix availableEPSS 86.4%10.0 HighMarch 15, 2003
bsd lpr, lprold, openbsd +1 more +3 moreBuffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3...CVE-2003-0144Public exploitFix available7.2 HighMarch 14, 2003
nokia sgsn dx200SNMP daemon in the DX200 based network element for Nokia Serving GPRS support node (SGSN) allows...CVE-2003-01375.0 MediumMarch 14, 2003
protegrity secure.dataBuffer overflows in protegrity.dll of Protegrity Secure.Data Extension Feature (SEF) before 2.2.3...CVE-2003-003010.0 HighMarch 14, 2003
lbl tcpdumpUnknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS...CVE-2003-0145Fix available5.0 MediumMarch 14, 2003
multitech routefinder 550 vpnThe web interface for SOHO Routefinder 550 firmware 4.63 and earlier, and possibly later versions...CVE-2003-01267.5 HighMarch 13, 2003
clearswift mailsweeperClearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an...CVE-2003-0121Public exploit7.5 HighMarch 13, 2003
file, netbsd +1 moreBuffer overflow in tryelf() in readelf.c of the file command allows attackers to execute...CVE-2003-0102Public exploitFix available4.6 MediumMarch 13, 2003
qualcomm qpopperThe pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer...CVE-2003-0143Public exploitFix available10.0 HighMarch 12, 2003
ethereal group etherealFormat string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0...CVE-2003-0081Fix available7.5 HighMarch 10, 2003
zlibBuffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf...CVE-2003-0107Public exploitFix availableEPSS 26.0%7.5 HighMarch 7, 2003
nokia 6210 handsetFormat string vulnerability in Nokia 6210 handset allows remote attackers to cause a denial of...CVE-2003-01035.0 MediumMarch 7, 2003
apple quicktime darwin mp3 broadcasterBuffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4...CVE-2003-00557.5 HighMarch 7, 2003
apple quicktime streaming server, darwin streaming server +1 moreApple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows...CVE-2003-00547.5 HighMarch 7, 2003
apple quicktime streaming server, darwin streaming server +1 moreCross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming...CVE-2003-00534.3 MediumMarch 7, 2003
apple quicktime streaming server, darwin streaming server +1 moreparse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming...CVE-2003-00525.0 MediumMarch 7, 2003
apple quicktime streaming server, darwin streaming server +1 moreparse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming...CVE-2003-00515.0 MediumMarch 7, 2003
apple quicktime streaming server, darwin streaming server +1 moreparse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming...CVE-2003-0050Public exploitEPSS 68.9%7.5 HighMarch 7, 2003
snortBuffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote...CVE-2003-0033EPSS 11.9%10.0 HighMarch 7, 2003
microsoft windows me, windows xp +1 moreCross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me...CVE-2003-0009Public exploitEPSS 16.5%6.8 MediumMarch 7, 2003
sun solarisUnknown vulnerability in UFS for Solaris 9 for SPARC, with logging enabled, allows local users to...CVE-2003-10772.1 LowMarch 5, 2003
sendmail, gentoo linux, hp alphaserver sc +6 more +8 moreBuffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via...CVE-2002-1337Public exploitFix availableEPSS 72.6%10.0 HighMarch 4, 2003
cisco iosBuffer overflow in Cisco IOS 11.2.x to 12.0.x allows remote attackers to cause a denial of...CVE-2003-0100Public exploit7.5 HighMarch 3, 2003
phpUnknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as...CVE-2003-00977.5 HighMarch 3, 2003
oracle database server, oracle8i, oracle9i +2 moreBuffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote...CVE-2003-0095EPSS 13.1%10.0 HighMarch 3, 2003
andries brouwer util-linuxA patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom...CVE-2003-00945.0 MediumMarch 3, 2003
lbl tcpdumpThe RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of...CVE-2003-0093Fix available5.0 MediumMarch 3, 2003
apple mac os xTruBlueEnvironment for MacOS 10.2.3 and earlier allows local users to overwrite or create...CVE-2003-00887.2 HighMarch 3, 2003
national language support libimBuffer overflow in libIM library (libIM.a) for National Language Support (NLS) on AIX 4.3 through...CVE-2003-0087Public exploit7.2 HighMarch 3, 2003
hanterm hanterm-xfThe DEC UDK processing feature in the hanterm (hanterm-xf) terminal emulator before 2.0.5 allows...CVE-2003-00792.1 LowMarch 3, 2003
xfree86 project x11r6The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier...CVE-2003-00712.1 LowMarch 3, 2003
gnome gnome-terminal, nalin dahyabhai vte +1 moreVTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome...CVE-2003-0070Fix available6.8 MediumMarch 3, 2003
michael jennings etermThe Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a...CVE-2003-0068Fix available7.5 HighMarch 3, 2003
rxvtThe rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a...CVE-2003-00667.5 HighMarch 3, 2003
national university of singapore uxtermThe uxterm terminal emulator allows attackers to modify the window title via a certain character...CVE-2003-00657.5 HighMarch 3, 2003
hp hp-ux, ibm aix, sgi irix +2 more +4 moreThe dtterm terminal emulator allows attackers to modify the window title via a certain character...CVE-2003-00647.5 HighMarch 3, 2003
xfree86, xfree86 project x11r6 +1 moreThe xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window...CVE-2003-00637.5 HighMarch 3, 2003
atermThe menuBar feature in aterm 0.42 allows attackers to modify menu options and execute arbitrary...CVE-2003-00247.5 HighMarch 3, 2003
rxvtThe menuBar feature in rxvt 2.7.8 allows attackers to modify menu options and execute arbitrary...CVE-2003-00235.0 MediumMarch 3, 2003
rxvtThe "screen dump" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a...CVE-2003-00225.0 MediumMarch 3, 2003
michael jennings etermThe "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary...CVE-2003-0021Fix available5.0 MediumMarch 3, 2003
att vnc, tightvnc +1 moreThe vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(),...CVE-2002-15115.0 MediumMarch 3, 2003
xfree86 project x11r6xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X...CVE-2002-151010.0 HighMarch 3, 2003
redhat linuxA patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with...CVE-2002-15093.6 LowMarch 3, 2003
xfree86 project x11r6Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid...CVE-2002-14727.2 HighMarch 3, 2003
oracle application serverFormat string vulnerability in certain third party modifications to mod_dav for logging bad...CVE-2002-0842EPSS 14.6%7.5 HighMarch 3, 2003