Skip to content

CVEs published in July 2003

98 vulnerabilities, 9 critical, 0 exploited.

microsoft internet explorerInternet Explorer 6 and earlier allows remote attackers to create chromeless windows using the...CVE-2001-1410Public exploitEPSS 50.5%5.0 MediumJuly 17, 2003
iglooftp proMultiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code...CVE-2003-0561Public exploit7.5 HighJuly 15, 2003
virtual programming vp-aspSQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain...CVE-2003-0560Public exploit10.0 HighJuly 15, 2003
phpforummainfile.php in phpforum 2 RC-1, and possibly earlier versions, allows remote attackers to...CVE-2003-05597.5 HighJuly 15, 2003
leapware leapftpBuffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a...CVE-2003-0558Public exploitEPSS 56.5%7.5 HighJuly 15, 2003
lagarde storefrontSQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions,...CVE-2003-0557Public exploit7.5 HighJuly 15, 2003
polycom mgc-100, mgc-25, mgc-50 +2 morePolycom MGC 25 allows remote attackers to cause a denial of service (crash) via a large number of...CVE-2003-05565.0 MediumJuly 15, 2003
imagemagickImageMagick 5.4.3.x and earlier allows attackers to cause a denial of service (crash) and...CVE-2003-05557.5 HighJuly 15, 2003
neomodus direct connectNeoModus Direct Connect 1.0 build 9, and possibly other versions, allows remote attackers to...CVE-2003-05545.0 MediumJuly 15, 2003
netscape navigatorBuffer overflow in the Client Detection Tool (CDT) plugin (npcdt.dll) for Netscape 7.02 allows...CVE-2003-05537.5 HighJuly 15, 2003
linux kernelThe kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures...CVE-2003-04655.0 MediumJuly 15, 2003
deerfield visnetic websiteVisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a...CVE-2003-04565.0 MediumJuly 15, 2003
linux-nfs nfs-utilsOff-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before...CVE-2003-0252Fix availableEPSS 15.8%9.8 CriticalJuly 14, 2003
knoppixQt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on...CVE-2003-05246.2 MediumJuly 10, 2003
early impact productcartCross-site scripting (XSS) vulnerability in msg.asp for certain versions of ProductCart allow...CVE-2003-0523Public exploit6.8 MediumJuly 10, 2003
early impact productcartMultiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1)...CVE-2003-052210.0 HighJuly 10, 2003
cpanelCross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert...CVE-2003-0521Public exploit6.8 MediumJuly 10, 2003
cerulean studios trillianTrillian 1.0 Pro and 0.74 Freeware allows remote attackers to cause a denial of service (crash)...CVE-2003-05205.0 MediumJuly 10, 2003
microsoft internet explorerCertain versions of Internet Explorer 5 and 6, in certain Windows environments, allow remote...CVE-2003-0519EPSS 10.8%5.0 MediumJuly 10, 2003
apple mac os x, mac os x server +1 moreThe screen saver in MacOS X allows users with physical access to cause the screen saver to crash...CVE-2003-05184.6 MediumJuly 10, 2003
mgetty project mgettyfaxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink...CVE-2003-0517Fix available5.5 MediumJuly 10, 2003
gert doering mgettycnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes,...CVE-2003-0516Fix available7.5 HighJuly 10, 2003
microsoft windows 2000, windows 2000 terminal services +1 moreMicrosoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL...CVE-2003-0496Public exploit7.2 HighJuly 10, 2003
microsoft windows 2000The control for listing accessibility options in the Accessibility Utility Manager on Windows...CVE-2003-03504.6 MediumJuly 10, 2003
microsoft windows xp, windows 2000, windows nt +2 moreBuffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote...CVE-2003-0345EPSS 34.6%7.5 HighJuly 10, 2003
apache http serverApache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of...CVE-2003-0254Fix available5.0 MediumJuly 10, 2003
apache http serverThe prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept,...CVE-2003-0253Fix available5.0 MediumJuly 10, 2003
apache http serverApache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle ...CVE-2003-0192Fix available6.4 MediumJuly 10, 2003
ddskk, skk, redhat daredevil skk +1 more +3 moreskk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is...CVE-2003-0539Fix available4.6 MediumJuly 8, 2003
phpsysinfoDirectory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write...CVE-2003-0536Public exploitFix available3.6 LowJuly 8, 2003
xblockout xblBuffer overflow in xbl 1.0k and earlier allows local users to gain privileges via a long -display...CVE-2003-0535Fix available7.2 HighJuly 8, 2003
teapopSQL injection vulnerabilities in the (1) PostgreSQL or (2) MySQL authentication modules for...CVE-2003-0515Fix available7.5 HighJuly 8, 2003
mozartThe mailcap file for mozart 1.2.5 and earlier causes Oz applications to be passed to the Oz...CVE-2003-0538Fix available7.5 HighJuly 7, 2003
daiki ueno liece emacs irc clientThe liece Emacs IRC client 2.0+0.20030527 and earlier creates temporary files insecurely, which...CVE-2003-0537Fix available4.6 MediumJuly 7, 2003
x-face-el Debianx-face-el - insecure temporary fileDSA-340Fix availableNo scoreJuly 6, 2003
semi, debian linux +1 moreThe (1) semi MIME library 1.14.5 and earlier, and (2) wemi 1.14.0 and possibly other versions,...CVE-2003-0440Fix available4.6 MediumJuly 6, 2003
ezbounceFormat string vulnerability in ezbounce 1.0 through 1.50 allows remote attackers to execute...CVE-2003-0510Public exploit7.5 HighJuly 4, 2003
cyberstrong eshopSQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal...CVE-2003-0509Public exploit10.0 HighJuly 4, 2003
adobe acrobat readerBuffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader (acroread) 5.0.7 and...CVE-2003-0508Public exploit7.5 HighJuly 4, 2003
microsoft windows 2000Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote...CVE-2003-0507EPSS 26.8%7.5 HighJuly 4, 2003
microsoft netmeetingMicrosoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service ...CVE-2003-0506EPSS 10.8%5.0 MediumJuly 4, 2003
microsoft netmeetingDirectory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote...CVE-2003-0505EPSS 13.5%5.0 MediumJuly 4, 2003
phpgroupwareMultiple cross-site scripting (XSS) vulnerabilities in Phpgroupware 0.9.14.003 (aka webdistro)...CVE-2003-05044.3 MediumJuly 4, 2003
microsoft windows 2000Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may...CVE-2003-05037.5 HighJuly 4, 2003
linux kernelThe /proc filesystem in Linux allows local users to obtain sensitive information by opening...CVE-2003-0501Public exploit2.1 LowJuly 4, 2003
intersystems cache databaseCaché Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows...CVE-2003-04987.2 HighJuly 4, 2003
intersystems cache databaseCaché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows...CVE-2003-0497Public exploit7.2 HighJuly 4, 2003
sun solaris, sunos +1 moreBuffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to...CVE-2003-1055Public exploit7.2 HighJuly 3, 2003