CVEs published in July 2003

98 vulnerabilities, 9 critical, 0 exploited.

• atari800 Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator ... CVE-2003-0630 Fix available 7.2 HighJuly 31, 2003
• linux kernel Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21... CVE-2003-0619 Public exploitFix available EPSS 10.9% 5.0 MediumJuly 31, 2003
• wuftpd wu-ftpd, apple mac os x, mac os x server +5 more +7 more Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may... CVE-2003-0466 Public exploitFix available EPSS 78.1% 9.8 CriticalJuly 31, 2003
• gallery project gallery Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote... CVE-2003-0614 Public exploitFix available 4.3 MediumJuly 30, 2003
• xtokkaetama Multiple buffer overflows in xtokkaetama 1.0 allow local users to gain privileges via a long (1) ... CVE-2003-0611 Public exploitFix available 4.6 MediumJuly 30, 2003
• microsoft windows 2000 The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of... CVE-2003-0605 Public exploit EPSS 58.8% 7.5 HighJuly 29, 2003
• microsoft windows media player Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft... CVE-2003-0604 EPSS 13.0% 7.5 HighJuly 29, 2003
• mozilla bugzilla Bugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versions allows local users to... CVE-2003-0603 2.1 LowJuly 29, 2003
• mozilla bugzilla Multiple cross-site scripting vulnerabilities (XSS) in Bugzilla 2.16.x before 2.16.3 and 2.17.x... CVE-2003-0602 6.8 MediumJuly 29, 2003
• cisco ios Cisco IOS 12.2 and earlier generates a "% Login invalid" message instead of prompting for a... CVE-2003-0512 5.0 MediumJuly 29, 2003
• cisco ios The web server for Cisco Aironet AP1x00 Series Wireless devices running certain versions of IOS... CVE-2003-0511 Public exploit 5.0 MediumJuly 29, 2003
• stanley t. shebs xconq Buffer overflow in xconq 7.4.1 allows local users to become part of the "games" group via the (1)... CVE-2003-0607 Fix available 4.6 MediumJuly 29, 2003
• sup, cvsup cvsup-mirror +1 more sup 1.8 and earlier does not properly create temporary files, which allows local users to... CVE-2003-0606 Fix available 4.6 MediumJuly 29, 2003
• linux kernel Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3... CVE-2003-0643 Fix available 2.1 LowJuly 25, 2003
• phpgroupware Unknown vulnerability in the Virtual File System (VFS) capability for phpGroupWare 0.9.16preRC... CVE-2003-0599 Fix available 10.0 HighJuly 25, 2003
• sco openserver Unknown vulnerability in display of Merge before 5.3.23a in UnixWare 7.1.x allows local users to... CVE-2003-0597 7.2 HighJuly 25, 2003
• terascript wintango application server Buffer overflow in WiTango Application Server and Tango 2000 allows remote attackers to execute... CVE-2003-0595 Public exploit 7.5 HighJuly 25, 2003
• xfstt X Fontserver for Truetype fonts (xfstt) 1.4 allows remote attackers to cause a denial of service... CVE-2003-0581 Fix available 7.5 HighJuly 25, 2003
• cisco ios, ons 15454 optical transport platform, optical networking systems software +2 more Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service ... CVE-2003-0567 Public exploit EPSS 16.6% 7.8 HighJuly 25, 2003
• novell netware Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote... CVE-2003-0562 Public exploit EPSS 14.3% 5.0 MediumJuly 25, 2003
• redhat linux Linux 2.4.x allows remote attackers to spoof the bridge Forwarding table via forged packets whose... CVE-2003-0552 Fix available 5.0 MediumJuly 25, 2003
• redhat linux The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which... CVE-2003-0551 Fix available 5.0 MediumJuly 25, 2003
• redhat linux The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design,... CVE-2003-0550 Fix available 5.0 MediumJuly 25, 2003
• microsoft windows nt The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause... CVE-2003-0525 5.0 MediumJuly 25, 2003
• apple darwin streaming server Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial... CVE-2003-0502 10.0 HighJuly 25, 2003
• redhat linux The RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow... CVE-2003-0464 4.6 MediumJuly 25, 2003
• linux kernel, mandrakesoft mandrake linux, mandrake linux corporate server +1 more +3 more A race condition in the way env_start and env_end pointers are initialized in the execve system... CVE-2003-0462 Public exploitFix available 1.2 LowJuly 25, 2003
• redhat linux /proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial... CVE-2003-0461 Fix available 2.1 LowJuly 25, 2003
• apache http server The rotatelogs program on Apache before 1.3.28, for Windows and OS/2 systems, does not properly... CVE-2003-0460 EPSS 13.4% 5.0 MediumJuly 25, 2003
• apple darwin streaming server The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the... CVE-2003-0426 10.0 HighJuly 25, 2003
• apple darwin streaming server Directory traversal vulnerability in Apple QuickTime / Darwin Streaming Server before 4.1.3f... CVE-2003-0425 5.0 MediumJuly 25, 2003
• apple darwin streaming server Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the... CVE-2003-0424 5.0 MediumJuly 25, 2003
• apple darwin streaming server parse_xml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers... CVE-2003-0423 5.0 MediumJuly 25, 2003
• apple darwin streaming server Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial... CVE-2003-0422 5.0 MediumJuly 25, 2003
• apple darwin streaming server Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial... CVE-2003-0421 10.0 HighJuly 25, 2003
• microsoft directx Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote... CVE-2003-0346 EPSS 32.7% 7.5 HighJuly 25, 2003
• microsoft sql server, data engine +1 more Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain... CVE-2003-0232 Public exploit 7.2 HighJuly 25, 2003
• microsoft sql server, data engine +1 more Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a... CVE-2003-0231 Public exploit EPSS 36.2% 5.0 MediumJuly 25, 2003
• microsoft sql server, data engine +1 more Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named... CVE-2003-0230 7.2 HighJuly 25, 2003
• sun sunos Unknown vulnerability in patches 108993-14 through 108993-19 and 108994-14 through 108994-19 for... CVE-2003-1065 2.1 LowJuly 23, 2003
• No product listed Solaris 8 with IPv6 enabled allows remote attackers to cause a denial of service (kernel panic)... CVE-2003-1064 5.0 MediumJuly 23, 2003
• fdclone FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable... CVE-2003-0596 Fix available 3.6 LowJuly 22, 2003
• ibm u2 universe Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to... CVE-2003-0580 7.2 HighJuly 17, 2003
• ibm u2 universe uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line... CVE-2003-0579 Public exploit 4.6 MediumJuly 17, 2003
• ibm u2 universe cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root,... CVE-2003-0578 7.8 HighJuly 17, 2003
• mpg123 mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary... CVE-2003-0577 Fix available 7.5 HighJuly 17, 2003
• microsoft isa server Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA)... CVE-2003-0526 Public exploit EPSS 22.5% 6.8 MediumJuly 17, 2003
• hp nonstop seeview server gateway Unknown vulnerability in HP NonStop Server D40.00 through D48.03, and G01.00 through G06.20,... CVE-2003-0458 4.6 MediumJuly 17, 2003
• microsoft windows nt, windows 2000, windows 2003 server +1 more +3 more Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and... CVE-2003-0352 Public exploit EPSS 98.5% 7.5 HighJuly 17, 2003
• adobe acrobat reader Adobe Acrobat Reader (acroread) 6, under certain circumstances when running with the "Certified... CVE-2003-0142 5.0 MediumJuly 17, 2003
• Show olderLoading…