Skip to content

CVEs published in August 2003

86 vulnerabilities, 5 critical, 0 exploited.

gamespy arcadeDirectory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e...CVE-2003-06507.5 HighAugust 5, 2003
cisco iosBuffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to...CVE-2003-0647Public exploit7.5 HighAugust 5, 2003
trend micro damage cleanup server, housecall +1 moreMultiple buffer overflows in ActiveX controls used by Trend Micro HouseCall 5.5 and 5.7, and...CVE-2003-06467.5 HighAugust 5, 2003
linux kernelUnknown vulnerability in ip_nat_sack_adjust of Netfilter in Linux kernels 2.4.20, and some 2.5.x,...CVE-2003-04675.0 MediumAugust 5, 2003
linux kernelThe connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled...CVE-2003-01875.0 MediumAugust 5, 2003
kernel-image-2.4.18-1-alpha Debian, kernel-image-2.4.18-1-i386 Debian, kernel-source-2.4.18 Debian +2 morelinux-kernel-2.4.18 - several vulnerabilitiesDSA-358-2Fix availableNo scoreAugust 5, 2003
phpgroupwareMultiple SQL injection vulnerabilities in the infolog module for phpgroupware 0.9.14 and earlier...CVE-2003-06577.5 HighAugust 5, 2003
eroastereroaster before 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on a...CVE-2003-0656Fix available2.1 LowAugust 5, 2003
kernel-image-2.4.18-i386bf Debianlinux-kernel-2.4.18 - several vulnerabilitiesDSA-358-3Fix availableNo scoreAugust 4, 2003
andries brouwer manman-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the ~/...CVE-2003-0645Public exploitFix available4.6 MediumAugust 4, 2003
haxx curlcurl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server.CVE-2003-1605Fix available7.5 HighAugust 3, 2003
wietse venema postfix, conectiva linux +1 moreThe address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial...CVE-2003-0540Public exploitFix availableEPSS 21.3%5.0 MediumAugust 3, 2003
wietse venema postfix, conectiva linux +1 morePostfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or...CVE-2003-0468Fix available5.0 MediumAugust 3, 2003
watchguard serverlockWatchGuard ServerLock for Windows 2000 before SL 2.0.4 allows local users to access kernel memory...CVE-2003-06422.1 LowAugust 2, 2003
watchguard serverlockWatchGuard ServerLock for Windows 2000 before SL 2.0.3 allows local users to load arbitrary...CVE-2003-06414.6 MediumAugust 2, 2003
bea weblogic serverBEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users...CVE-2003-064010.0 HighAugust 2, 2003
novell ichainUnknown vulnerability in Novell iChain 2.2 before Support Pack 1 allows users to access...CVE-2003-06395.0 MediumAugust 2, 2003
novell ichainMultiple buffer overflows in Novell iChain 2.1 before Field Patch 3, and iChain 2.2 before Field...CVE-2003-06387.5 HighAugust 2, 2003
novell ichainNovell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a...CVE-2003-06375.0 MediumAugust 2, 2003
novell ichainNovell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS...CVE-2003-06367.5 HighAugust 2, 2003
novell ichainUnknown vulnerability or vulnerabilities in Novell iChain 2.2 before Support Pack 1, with unknown...CVE-2003-06355.0 MediumAugust 2, 2003
oracle oracle9i, oracle8i +1 moreStack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2...CVE-2003-06347.5 HighAugust 2, 2003
oracle applications, e-business suite +1 moreMultiple vulnerabilities in aoljtest.jsp of Oracle Applications AOL/J Setup Test Suite in Oracle...CVE-2003-06335.0 MediumAugust 2, 2003
oracle applications, e-business suite +1 moreBuffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI program (FNDWRR.exe) of...CVE-2003-06327.5 HighAugust 2, 2003
vmware gsx server, workstation +1 moreVMware GSX Server 2.5.1 build 4968 and earlier, and Workstation 4.0 and earlier, allows local...CVE-2003-06317.2 HighAugust 2, 2003
hugo rabson mindimindi 0.58 and earlier does not properly create temporary files, which allows local users to...CVE-2003-0617Fix available4.6 MediumAugust 2, 2003
andries brouwer manMultiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users...CVE-2003-0620Public exploitFix available4.6 MediumAugust 1, 2003
mcafee epolicy orchestratorFormat string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1...CVE-2003-06167.5 HighAugust 1, 2003
cgi.pm, debian linux, openpkg +2 moreCross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to...CVE-2003-0615Fix available4.3 MediumAugust 1, 2003
mcafee epolicy orchestratorDirectory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote...CVE-2003-06105.0 MediumAugust 1, 2003
sun solaris, sunos +1 moreStack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local...CVE-2003-0609Public exploit7.2 HighAugust 1, 2003
sgi irixHeap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f,...CVE-2003-057510.0 HighAugust 1, 2003
mcafee epolicy orchestratorHeap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1...CVE-2003-01497.5 HighAugust 1, 2003
mcafee epolicy orchestratorThe default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers...CVE-2003-01487.2 HighAugust 1, 2003
hadrons xfsttOff-by-one error in certain versions of xfstt allows remote attackers to read potentially...CVE-2003-0625Public exploitFix available7.5 HighAugust 1, 2003
kde konqueror, konqueror embedded, redhat analog real-time synthesizer +5 more +7 moreKDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of...CVE-2003-04595.0 MediumAugust 1, 2003