CVEs published in June 2003

125 vulnerabilities, 13 critical, 0 exploited.

• proftpd project proftpd SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for... CVE-2003-0500 Public exploitFix available EPSS 18.3% 10.0 HighJune 29, 2003
• gtksee Heap-based buffer overflow in GTKSee 0.5 and 0.5.1 allows remote attackers to execute arbitrary... CVE-2003-0444 Fix available 7.5 HighJune 29, 2003
• ledscripts.com lednews Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert... CVE-2003-0495 Public exploit 4.3 MediumJune 28, 2003
• snitz communications forums 2000 password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and... CVE-2003-0494 10.0 HighJune 28, 2003
• snitz communications forums 2000 Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing... CVE-2003-0493 10.0 HighJune 28, 2003
• snitz communications forums 2000 Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows... CVE-2003-0492 Public exploit 6.8 MediumJune 28, 2003
• mytutorials tutorials The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code... CVE-2003-0491 7.5 HighJune 28, 2003
• dantz retrospect client The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other... CVE-2003-0490 7.2 HighJune 28, 2003
• kerio mailserver Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote... CVE-2003-0488 Public exploit 5.1 MediumJune 28, 2003
• kerio mailserver Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a... CVE-2003-0487 Public exploit EPSS 11.4% 7.5 HighJune 28, 2003
• phpbb group phpbb SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers... CVE-2003-0486 Public exploit 5.0 MediumJune 28, 2003
• progress 4gl compiler Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary... CVE-2003-0485 4.6 MediumJune 28, 2003
• phpbb group phpbb Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to... CVE-2003-0484 6.8 MediumJune 28, 2003
• xmb forum xmb Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to... CVE-2003-0483 Public exploit 6.8 MediumJune 28, 2003
• gero kohnert tutos TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new... CVE-2003-0482 Public exploit 7.5 HighJune 28, 2003
• gero kohnert tutos Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to insert... CVE-2003-0481 Public exploit 4.3 MediumJune 28, 2003
• vmware workstation VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain... CVE-2003-0480 3.7 LowJune 28, 2003
• affordable web space design webbbs Cross-site scripting (XSS) vulnerability in the guestbook for WebBBS allows remote attackers to... CVE-2003-0479 4.3 MediumJune 28, 2003
• bahamut ircd, daniel moss methane, hans westerhof digatech +2 more +4 more Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based... CVE-2003-0478 Public exploit EPSS 12.3% 10.0 HighJune 28, 2003
• wzdftpd wzdftpd 0.1rc4 and earlier allows remote attackers to cause a denial of service (crash) via a... CVE-2003-0477 5.0 MediumJune 28, 2003
• linux kernel The execve system call in Linux 2.4.x records the file descriptor of the executable process in... CVE-2003-0476 Fix available 2.1 LowJune 28, 2003
• ashley brown iweb server Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary... CVE-2003-0475 5.0 MediumJune 28, 2003
• ashley brown iweb server Directory traversal vulnerability in iWeb Server allows remote attackers to read arbitrary files... CVE-2003-0474 5.0 MediumJune 28, 2003
• sgi irix Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as... CVE-2003-0473 10.0 HighJune 28, 2003
• sgi irix The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service (hang) in... CVE-2003-0472 5.0 MediumJune 28, 2003
• alt-n webadmin Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code... CVE-2003-0471 Public exploit EPSS 61.0% 7.5 HighJune 28, 2003
• symantec security check Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information... CVE-2003-0470 Public exploit 7.5 HighJune 28, 2003
• microsoft windows 2000, windows 2003 server, windows 98 +4 more +6 more Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows... CVE-2003-0469 Public exploit EPSS 44.6% 7.5 HighJune 28, 2003
• microsoft windows 2000 Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for... CVE-2003-0349 Public exploit EPSS 80.3% 7.5 HighJune 28, 2003
• microsoft windows media player A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view... CVE-2003-0348 EPSS 19.9% 6.4 MediumJune 28, 2003
• nis ypserv nis server ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP... CVE-2003-0251 Fix available 5.0 MediumJune 28, 2003
• mantis Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable... CVE-2003-0499 Fix available 3.6 LowJune 28, 2003
• joe rumsey xgalaga Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via... CVE-2003-0454 Public exploitFix available 7.2 HighJune 28, 2003
• imagemagick libmagick library The imagemagick libmagick library 5.5 and earlier creates temporary files insecurely, which... CVE-2003-0455 Fix available 4.6 MediumJune 27, 2003
• ehud gavron traceroute-nanog traceroute-nanog 6.1.1 allows local users to overwrite unauthorized memory and possibly execute... CVE-2003-0453 Fix available 10.0 HighJune 24, 2003
• michael c. toren tcptraceroute tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor... CVE-2003-0489 Fix available 7.2 HighJune 23, 2003
• progress database Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which... CVE-2003-0449 Public exploit 4.6 MediumJune 20, 2003
• aboleo.net portmon Portmon 1.7 and possibly earlier versions allows local users to read and write arbitrary files... CVE-2003-0448 3.6 LowJune 20, 2003
• microsoft internet explorer The Custom HTTP Errors capability in Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers... CVE-2003-0447 Public exploit EPSS 13.7% 5.1 MediumJune 20, 2003
• microsoft internet explorer Cross-site scripting (XSS) in Internet Explorer 5.5 and 6.0, possibly in a component that is also... CVE-2003-0446 Public exploit EPSS 23.0% 4.3 MediumJune 20, 2003
• php, redhat linux +1 more Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before... CVE-2003-0442 Public exploitFix available 4.3 MediumJune 20, 2003
• mnogosearch Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary... CVE-2003-0437 Public exploit 7.5 HighJune 20, 2003
• mnogosearch Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary... CVE-2003-0436 Public exploit 7.5 HighJune 20, 2003
• rsa ace agent Cross-site scripting (XSS) vulnerability in the secure redirect function of RSA ACE/Agent 5.0 for... CVE-2003-0389 4.3 MediumJune 20, 2003
• gunnar ritter osh Buffer overflows in osh before 1.7-11 allow local users to execute arbitrary code and bypass... CVE-2003-0452 Fix available 4.6 MediumJune 20, 2003
• sun solaris, sunos +1 more Multiple buffer overflows in the (1) dbm_open function, as used in ndbm and dbm, and the (2)... CVE-2003-1067 7.2 HighJune 19, 2003
• xblockout xbl Multiple buffer overflows in xbl before 1.0k allow local users to gain privileges via certain... CVE-2003-0451 Fix available 4.6 MediumJune 19, 2003
• webfs Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an... CVE-2003-0445 Fix available 7.5 HighJune 19, 2003
• orville-write Multiple buffer overflows in Orville Write (orville-write) 2.53 and earlier allow local users to... CVE-2003-0441 Fix available 7.2 HighJune 19, 2003
• yuuichi teranishi eldav eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or... CVE-2003-0438 Fix available 1.2 LowJune 19, 2003
• Show olderLoading…