Skip to content

CVEs published in April 2003

90 vulnerabilities, 10 critical, 0 exploited.

openbsdInteger signedness error in select() on OpenBSD 3.1 and earlier allows local users to overwrite...CVE-2002-14207.2 HighApril 11, 2003
sgi irixThe upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system...CVE-2002-14197.5 HighApril 11, 2003
novell netware, small business suite +1 moreBuffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and...CVE-2002-14185.0 MediumApril 11, 2003
novell netware, small business suite +1 moreDirectory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6...CVE-2002-1417EPSS 16.6%5.0 MediumApril 11, 2003
inter7 qmailadminBuffer overflow in qmailadmin allows local users to gain privileges via a long...CVE-2002-1414Public exploit4.6 MediumApril 11, 2003
novell netwareRCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to...CVE-2002-14137.5 HighApril 11, 2003
adam megacz tinysslTinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA-signed...CVE-2002-14077.5 HighApril 11, 2003
xfsdump, sgi irix +1 morexfsdq in xfsdump does not create quota information files securely, which allows local users to...CVE-2003-0173Fix available7.2 HighApril 11, 2003
borland software interbase, firebirdsql firebird +1 moreBuffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via...CVE-2003-01977.2 HighApril 8, 2003
moxftp, xftp +1 moreBuffer overflow in moxftp 2.2 and earlier allows remote malicious FTP servers to execute...CVE-2003-0203Public exploitFix available7.5 HighApril 8, 2003
samba, samba-tng, apple mac os x +5 more +7 moreBuffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10...CVE-2003-0201Public exploitFix availableEPSS 84.6%10.0 HighApril 7, 2003
samba, compaq tru64, hp cifs-9000 server +4 more +6 moreMultiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary...CVE-2003-0196Fix availableEPSS 22.8%10.0 HighApril 7, 2003
redhat linuxvsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers (tcp_wrappers) but is...CVE-2003-01357.5 HighApril 3, 2003
apache http serverUnknown vulnerability in filestat.c for Apache running on OS2, versions 2.0 through 2.0.45,...CVE-2003-0134Fix available5.0 MediumApril 3, 2003
apache http serverA memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service ...CVE-2003-0132Public exploitFix availableEPSS 87.1%5.0 MediumApril 3, 2003
microsoft excel, word +1 moreMicrosoft Word and Excel allow remote attackers to steal sensitive information via certain field...CVE-2002-1143Public exploitEPSS 53.6%5.0 MediumApril 3, 2003
mondosoft mondosearchMsmMask.exe in MondoSearch 4.4 allows remote attackers to obtain the source code of scripts via...CVE-2002-15285.0 MediumApril 2, 2003
nullsoft winampBuffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to...CVE-2002-15247.5 HighApril 2, 2003
mdg computer services web server 4dWeb Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows...CVE-2002-15212.1 LowApril 2, 2003
watchguard firebox, rapidstream +1 moreThe CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does...CVE-2002-152010.0 HighApril 2, 2003
watchguard firebox, rapidstream +1 moreFormat string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier,...CVE-2002-151910.0 HighApril 2, 2003
sgi irixmv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory,...CVE-2002-15183.6 LowApril 2, 2003
sgi irix, freeware +1 morefsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink...CVE-2002-15174.6 MediumApril 2, 2003
sgi irixrpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite...CVE-2002-15164.6 MediumApril 2, 2003
borland software interbasegds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a...CVE-2002-1514Public exploit7.2 HighApril 2, 2003
compaq tcp-ip servicesThe UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to...CVE-2002-1513Public exploit4.6 MediumApril 2, 2003
woltlab burning boardSQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier...CVE-2002-1505Public exploit7.5 HighApril 2, 2003
dave brul xbreakySymbolic link vulnerability in xbreaky before 0.5.5 allows local users to overwrite arbitrary...CVE-2002-15022.1 LowApril 2, 2003
enterasys smartswitch ssr8000The MPS functionality in Enterasys SSR8000 (Smart Switch Router) before firmware 8.3.0.10 allows...CVE-2002-1501Public exploit5.0 MediumApril 2, 2003
nulllogic null httpdCross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote...CVE-2002-1497Public exploit4.3 MediumApril 2, 2003
nulllogic null httpdHeap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to...CVE-2002-1496Public exploitEPSS 22.5%7.5 HighApril 2, 2003
aestiva html osCross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows remote attackers to insert...CVE-2002-1494Public exploit4.3 MediumApril 2, 2003
lycos htmlgear guestgearCross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook allows remote attackers to...CVE-2002-1493Public exploit4.3 MediumApril 2, 2003
cisco vpn 5000 clientThe Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in...CVE-2002-14915.0 MediumApril 2, 2003
netbsdNetBSD 1.4 through 1.6 beta allows local users to cause a denial of service (kernel panic) via a...CVE-2002-14902.1 LowApril 2, 2003
hp instant toptoolshpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote...CVE-2003-0169Public exploit5.0 MediumApril 1, 2003
apple quicktimeBuffer overflow in Apple QuickTime Player 5.x and 6.0 for Windows allows remote attackers to...CVE-2003-01687.5 HighApril 1, 2003
sendmail, compaq tru64, hp hp-ux +6 more +8 moreThe prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not...CVE-2003-0161Public exploitFix availableEPSS 38.8%10.0 HighApril 1, 2003
sun solaris, sunos +1 moreHeap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to...CVE-2003-00927.2 HighApril 1, 2003
sun solaris, sunos +1 moreStack-based buffer overflow in the bsd_queue() function for lpq on Solaris 2.6 and 7 allows local...CVE-2003-00917.2 HighApril 1, 2003