CVEs published in April 2003

90 vulnerabilities, 10 critical, 0 exploited.

• oracle database server, oracle8i, oracle9i +2 more Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and... CVE-2003-0222 EPSS 11.0% 9.0 HighApril 30, 2003
• hp tru64 The (1) dupatch and (2) setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allows local users... CVE-2003-0221 7.2 HighApril 29, 2003
• kerio personal firewall 2 Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1... CVE-2003-0220 Public exploit EPSS 69.1% 7.5 HighApril 29, 2003
• kerio personal firewall 2 Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute administrator... CVE-2003-0219 7.5 HighApril 29, 2003
• monkey-project monkey Buffer overflow in PostMethod() function for Monkey HTTP Daemon (monkeyd) 0.6.1 and earlier... CVE-2003-0218 7.5 HighApril 29, 2003
• sgi irix The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the... CVE-2003-0174 9.8 CriticalApril 29, 2003
• mod auth any auth any mod_auth_any package in Red Hat Enterprise Linux 2.1 and other operating systems does not... CVE-2003-0084 7.5 HighApril 29, 2003
• sun solaris, sunos +1 more Memory leak in lofiadm in Solaris 8 allows local users to cause a denial of service (kernel... CVE-2003-1072 2.1 LowApril 28, 2003
• sun solaris, sunos +1 more Unknown vulnerability in rpcbind for Solaris 2.6 through 9 allows remote attackers to cause a... CVE-2003-1070 5.0 MediumApril 28, 2003
• cisco catos Unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and... CVE-2003-0216 9.3 HighApril 26, 2003
• battleaxe software bttlxeforum SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to... CVE-2003-0215 Public exploit 7.5 HighApril 26, 2003
• poptop pptp server ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of... CVE-2003-0213 Public exploitFix available EPSS 70.9% 7.5 HighApril 26, 2003
• cisco secure access control server Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows... CVE-2003-0210 7.5 HighApril 26, 2003
• microsoft internet explorer, ie +1 more Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check the Cascading Style Sheet... CVE-2003-0116 EPSS 25.2% 5.0 MediumApril 26, 2003
• microsoft internet explorer, ie +1 more The file upload control in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers... CVE-2003-0114 EPSS 14.6% 5.0 MediumApril 26, 2003
• microsoft ie, internet explorer +1 more Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote... CVE-2003-0113 Public exploit EPSS 39.4% 7.5 HighApril 26, 2003
• microsoft windows 2000, windows 2000 terminal services, windows nt +1 more +3 more Buffer overflow in Windows Kernel allows local users to gain privileges by causing certain error... CVE-2003-0112 4.6 MediumApril 26, 2003
• stunnel stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD... CVE-2002-1563 Fix available 1.2 LowApril 26, 2003
• acme labs thttpd Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers... CVE-2002-1562 Fix available 5.0 MediumApril 26, 2003
• gkrellm newsticker newsticker gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to cause a denial of... CVE-2003-0206 Fix available 5.0 MediumApril 23, 2003
• gkrellm newsticker newsticker gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary... CVE-2003-0205 Fix available 7.5 HighApril 23, 2003
• the cacti group cacti Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has... CVE-2002-1479 Fix available 4.6 MediumApril 22, 2003
• netbsd Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and possibly other operating... CVE-2002-1476 4.6 MediumApril 22, 2003
• ximian evolution The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it... CVE-2002-1471 Fix available 5.0 MediumApril 22, 2003
• scponly scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs,... CVE-2002-1469 Public exploit 7.5 HighApril 22, 2003
• ibm aix Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root. CVE-2002-1468 Public exploit 10.0 HighApril 22, 2003
• michael sandrof ircii Multiple buffer overflows in ircII 20020912 allows remote malicious IRC servers to cause a denial... CVE-2003-0323 Fix available 7.5 HighApril 22, 2003
• debian mime-support run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via... CVE-2003-0214 Fix available 4.6 MediumApril 22, 2003
• rinetd handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes... CVE-2003-0212 Fix available 7.5 HighApril 17, 2003
• mod access referer access referer mod_access_referer 1.0.2 allows remote attackers to cause a denial of service (crash) via a... CVE-2003-1054 Public exploit 5.0 MediumApril 16, 2003
• xinetd Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service (memory... CVE-2003-0211 Public exploitFix available 5.0 MediumApril 16, 2003
• sourcefire snort, smoothwall +1 more Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows... CVE-2003-0209 Public exploitFix available EPSS 38.6% 10.0 HighApril 16, 2003
• macromedia flash Cross-site scripting (XSS) vulnerability in Macromedia Flash ad user tracking capability allows... CVE-2003-0208 4.3 MediumApril 15, 2003
• apple mac os x, mac os x server +1 more Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and... CVE-2003-0198 6.4 MediumApril 15, 2003
• apple mac os x, mac os x server +1 more DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch... CVE-2003-0171 Public exploit 7.2 HighApril 15, 2003
• gaim-encryption decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a... CVE-2003-0163 5.0 MediumApril 15, 2003
• gnome gtkhtml GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of... CVE-2003-0133 Fix available 5.0 MediumApril 15, 2003
• microsoft virtual machine, windows 2000, windows 2000 terminal services +2 more The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as... CVE-2003-0111 Public exploit EPSS 35.8% 7.5 HighApril 15, 2003
• microsoft proxy server, isa server +1 more The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in... CVE-2003-0110 EPSS 18.0% 5.0 MediumApril 15, 2003
• epic epic4 Buffer overflows in EPIC IRC Client (EPIC4) 1.0.1 allows remote malicious IRC servers to cause a... CVE-2003-0324 Fix available 7.5 HighApril 15, 2003
• gs-common ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers... CVE-2003-0207 Fix available 2.1 LowApril 14, 2003
• astart technologies lprng psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link... CVE-2003-0136 Fix available 2.1 LowApril 14, 2003
• kde KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via ... CVE-2003-0204 Fix available 7.5 HighApril 12, 2003
• google toolbar The Google toolbar 1.1.58 and earlier allows remote web sites to monitor a user's input into the... CVE-2002-1443 5.0 MediumApril 11, 2003
• novell netware The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to... CVE-2002-1438 5.0 MediumApril 11, 2003
• novell netware Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and... CVE-2002-1437 EPSS 17.0% 5.0 MediumApril 11, 2003
• novell netware The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to... CVE-2002-1436 Public exploit 7.5 HighApril 11, 2003
• achievo class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote... CVE-2002-1435 Public exploit 7.5 HighApril 11, 2003
• synthetic reality sympoll Unknown vulnerability in Sympoll 1.2 allows remote attackers to read arbitrary files when... CVE-2002-1430 5.0 MediumApril 11, 2003
• john g. myers mpack Buffer overflow in munpack in mpack 1.5 and earlier allows remote attackers to cause a denial of... CVE-2002-1424 Fix available 5.0 MediumApril 11, 2003
• Show olderLoading…