CVEs published in September 2003

107 vulnerabilities, 17 critical, 0 exploited.

• webfs Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by... CVE-2003-0833 Public exploitFix available 7.5 HighSeptember 29, 2003
• webfs Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary... CVE-2003-0832 Fix available 5.0 MediumSeptember 29, 2003
• gus and psilord freesweep Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain "games" group... CVE-2003-0828 Fix available 4.6 MediumSeptember 28, 2003
• marbles Buffer overflow in marbles 1.0.2 and earlier allows local users to gain privileges via a long... CVE-2003-0830 Public exploitFix available 4.6 MediumSeptember 26, 2003
• proftpd project proftpd ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring... CVE-2003-0831 Public exploit EPSS 56.9% 9.0 HighSeptember 25, 2003
• apple mac os x, freebsd, apple mac os x server +1 more +3 more The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD... CVE-2003-0804 5.0 MediumSeptember 25, 2003
• openbsd openssh The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as... CVE-2003-0787 Fix available 7.5 HighSeptember 25, 2003
• openbsd openssh The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege... CVE-2003-0786 Fix available 10.0 HighSeptember 25, 2003
• ibm db2 universal database The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial... CVE-2003-0827 5.0 MediumSeptember 23, 2003
• gnu lsh lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2)... CVE-2003-0826 Public exploitFix available EPSS 12.1% 7.5 HighSeptember 23, 2003
• ibm aix Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote... CVE-2003-0784 10.0 HighSeptember 23, 2003
• ibm aix Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with... CVE-2003-0697 7.2 HighSeptember 23, 2003
• brian bassett ipmasq ipmasq before 3.5.12, in certain configurations, may forward packets to the external interface... CVE-2003-0785 Fix available 7.5 HighSeptember 20, 2003
• ibm db2 universal database Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local... CVE-2003-0759 Public exploit 7.2 HighSeptember 19, 2003
• ibm db2 universal database Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users... CVE-2003-0758 Public exploit 7.2 HighSeptember 19, 2003
• sco openserver SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the... CVE-2003-0742 7.2 HighSeptember 19, 2003
• apache tomcat Apache Tomcat XSS Vulnerability CVE-2002-1567 Public exploitFix available EPSS 27.1% 6.8 MediumSeptember 19, 2003
• nokia electronic documentation Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy... CVE-2003-0803 Public exploit 7.5 HighSeptember 18, 2003
• nokia electronic documentation Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of... CVE-2003-0802 Public exploit 5.0 MediumSeptember 18, 2003
• nokia electronic documentation Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows... CVE-2003-0801 Public exploit EPSS 12.2% 4.3 MediumSeptember 18, 2003
• kde KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not... CVE-2003-0692 Fix available 7.5 HighSeptember 18, 2003
• kde KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds,... CVE-2003-0690 Fix available 10.0 HighSeptember 18, 2003
• sgi irix Unknown vulnerability in NFS for SGI IRIX 6.5.21 and earlier may allow an NFS client to bypass... CVE-2003-0680 7.5 HighSeptember 18, 2003
• university of minnesota gopherd Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows... CVE-2003-0805 Public exploitFix available 7.5 HighSeptember 18, 2003
• yongguang zhang hztty Multiple buffer overflows in hztty 2.0 allow local users to gain root privileges. CVE-2003-0783 Public exploitFix available 7.2 HighSeptember 18, 2003
• sun solaris The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows... CVE-2003-0722 Public exploit EPSS 88.8% 10.0 HighSeptember 17, 2003
• sendmail, apple mac os x, mac os x server +15 more +17 more The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via... CVE-2003-0694 Fix available EPSS 66.2% 10.0 HighSeptember 17, 2003
• sendmail, apple mac os x, mac os x server +11 more +13 more A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard... CVE-2003-0681 Public exploitFix available EPSS 22.4% 7.5 HighSeptember 17, 2003
• openbsd openssh Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial... CVE-2003-0695 Fix available 7.5 HighSeptember 16, 2003
• openbsd openssh A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow... CVE-2003-0693 Fix available EPSS 11.4% 10.0 HighSeptember 16, 2003
• openbsd openssh "Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of... CVE-2003-0682 Fix available 7.5 HighSeptember 16, 2003
• mysql, conectiva linux +1 more Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23... CVE-2003-0780 Public exploitFix available EPSS 78.4% 9.0 HighSeptember 12, 2003
• digium asterisk SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk... CVE-2003-0779 Fix available 7.5 HighSeptember 12, 2003
• ipswitch ws ftp server Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of... CVE-2003-0772 Public exploit EPSS 84.9% 7.5 HighSeptember 12, 2003
• apache gallery gallery Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline... CVE-2003-0771 Fix available 4.6 MediumSeptember 12, 2003
• ikonboard.com ikonboard FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang"... CVE-2003-0770 Public exploit EPSS 11.1% 7.5 HighSeptember 12, 2003
• mirabilis icq Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows... CVE-2003-0769 Public exploit 4.3 MediumSeptember 12, 2003
• microsoft asp.net Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script... CVE-2003-0768 EPSS 13.0% 6.8 MediumSeptember 12, 2003
• gamespy roger wilco dedicated server, roger wilco graphical server +1 more Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and... CVE-2003-0767 Public exploit 7.5 HighSeptember 12, 2003
• ftp desktop desktop Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions,... CVE-2003-0766 Public exploit 7.5 HighSeptember 12, 2003
• nullsoft winamp The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to... CVE-2003-0765 Public exploit 7.5 HighSeptember 12, 2003
• squished mosquito escapade Escapade Scripting Engine (ESP) allows remote attackers to obtain sensitive path information via... CVE-2003-0764 5.0 MediumSeptember 12, 2003
• squished mosquito escapade Cross-site scripting (XSS) vulnerability in Escapade Scripting Engine (ESP) allows remote... CVE-2003-0763 Public exploit 4.3 MediumSeptember 12, 2003
• foxweb Buffer overflow in (1) foxweb.dll and (2) foxweb.exe of Foxweb 2.5 allows remote attackers to... CVE-2003-0762 Public exploit 7.5 HighSeptember 12, 2003
• digium asterisk Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP)... CVE-2003-0761 Fix available 7.5 HighSeptember 12, 2003
• optisoft blubster Blubster 2.5 allows remote attackers to cause a denial of service (crash) via a flood of... CVE-2003-0760 Public exploit 5.0 MediumSeptember 12, 2003
• washington pine Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote... CVE-2003-0721 7.5 HighSeptember 12, 2003
• university of washington pine Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a... CVE-2003-0720 Public exploit EPSS 12.9% 7.5 HighSeptember 12, 2003
• microsoft windows 2000, windows 2003 server, windows nt +1 more +3 more Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the... CVE-2003-0715 EPSS 40.3% 10.0 HighSeptember 12, 2003
• kismac KisMAC before 0.05d trusts user-supplied variables when chown'ing files or directories, which... CVE-2003-0704 7.2 HighSeptember 12, 2003
• Show olderLoading…