CVEs published in October 2003

92 vulnerabilities, 9 critical, 0 exploited.

• plug and play web server proxy Plug and Play Web Server Proxy 1.0002c allows remote attackers to cause a denial of service ... CVE-2003-1159 5.0 MediumOctober 31, 2003
• No product listed Cross-site scripting (XSS) vulnerability in index.php for Ledscripts.com LedForums Beta 1 allows... CVE-2003-1197 Public exploit 6.8 MediumOctober 30, 2003
• booby Cross-site scripting (XSS) vulnerability in Booby .1 through 0.2.3 allows remote attackers to... CVE-2003-1194 6.8 MediumOctober 30, 2003
• seyeon flexwatch network video server FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain... CVE-2003-1160 Public exploit 10.0 HighOctober 30, 2003
• croteam serioussam Croteam Serious Sam demo test 2 2.1a, Serious Sam: the First Encounter 1.05, and Serious Sam: the... CVE-2003-1143 Public exploit 7.5 HighOctober 30, 2003
• postgresql Buffer overflow in to_ascii for PostgreSQL 7.2.x, and 7.3.x before 7.3.4, allows remote attackers... CVE-2003-0901 Fix available 7.5 HighOctober 30, 2003
• apple mac os x Buffer overflow in the Mac OS X kernel 10.2.8 and earlier allows local users, and possibly remote... CVE-2003-0895 4.6 MediumOctober 30, 2003
• apple mac os x The System Preferences capability in Mac OS X before 10.3 allows local users to access secure... CVE-2003-0883 4.6 MediumOctober 30, 2003
• apple mac os x Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote... CVE-2003-0882 5.0 MediumOctober 30, 2003
• apple mac os x Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext... CVE-2003-0881 7.5 HighOctober 30, 2003
• apple mac os x Unknown vulnerability in Mac OS X before 10.3 allows local users to access Dock functions from... CVE-2003-0880 4.6 MediumOctober 30, 2003
• apple mac os x slpd daemon in Mac OS X before 10.3 allows local users to overwrite arbitrary files via a symlink... CVE-2003-0878 2.1 LowOctober 30, 2003
• apple mac os x Mac OS X before 10.3 with core files enabled allows local users to overwrite arbitrary files and... CVE-2003-0877 4.6 MediumOctober 30, 2003
• apple mac os x, mac os x server +1 more Finder in Mac OS X 10.2.8 and earlier sets global read/write/execute permissions on directories... CVE-2003-0876 2.1 LowOctober 30, 2003
• apple mac os x, mac os x server +1 more Unknown vulnerability in QuickTime Java in Mac OS X v10.3 and Mac OS X Server 10.3 allows... CVE-2003-0871 7.5 HighOctober 30, 2003
• charles kerr pan Pan 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news... CVE-2003-0855 Fix available 7.8 HighOctober 30, 2003
• apache http server mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properly handle CGI... CVE-2003-0789 Fix available EPSS 12.4% 10.0 HighOctober 30, 2003
• sgi irix NFS in SGI 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an ... CVE-2003-0683 7.5 HighOctober 30, 2003
• apache http server Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3... CVE-2003-0542 Fix available EPSS 30.4% 7.2 HighOctober 30, 2003
• ucd-snmp Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows... CVE-2002-1570 Public exploit 7.5 HighOctober 30, 2003
• e107 chatbox.php in e107 0.554 and 0.603 allows remote attackers to cause a denial of service (pages... CVE-2003-1191 Public exploit 5.0 MediumOctober 29, 2003
• nokia ipso Unknown vulnerability in Nokia IPSO 3.7, configured as IP Clusters, allows remote attackers to... CVE-2003-1189 5.0 MediumOctober 29, 2003
• telcondex simplewebserver Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to... CVE-2003-1186 7.5 HighOctober 29, 2003
• acme thttpd Buffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to... CVE-2003-0899 Public exploitFix available EPSS 22.2% 9.8 CriticalOctober 29, 2003
• oracle files The WebCache component in Oracle Files 9.0.3.1.0, 9.0.3.2.0, and 9.0.3.3.0 of Oracle... CVE-2003-1183 4.6 MediumOctober 28, 2003
• No product listed Cross-site scripting (XSS) vulnerability in Fastream NETFile Server 6.0.3.588 allows remote... CVE-2003-1151 Public exploit 4.3 MediumOctober 28, 2003
• ibm db2 universal database IBM DB2 7.2 before FixPak 10a, and earlier versions including 7.1, allows local users to... CVE-2003-0898 Public exploit 4.6 MediumOctober 28, 2003
• novell netware, zenworks desktops +1 more Buffer overflow in the portmapper service (PMAP.NLM) in Novell NetWare 6 SP3 and ZenWorks for... CVE-2003-1150 7.5 HighOctober 27, 2003
• symantec norton internet security Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34... CVE-2003-1149 Public exploit 4.3 MediumOctober 27, 2003
• musicqueue Buffer overflow in Musicqueue 1.2.0 allows local users to execute arbitrary code via a long... CVE-2003-1140 Public exploit 10.0 HighOctober 27, 2003
• musicqueue Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation... CVE-2003-1139 Public exploit 5.0 MediumOctober 27, 2003
• redhat interchange The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote... CVE-2003-1138 Public exploit 5.0 MediumOctober 27, 2003
• charles steinkuehler sh-httpd Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute... CVE-2003-1137 Public exploit 5.0 MediumOctober 27, 2003
• sun solaris, sunos +1 more The NFS Server for Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (UFS... CVE-2003-1060 5.0 MediumOctober 27, 2003
• advanced poll poll Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request... CVE-2003-1181 Public exploit 5.0 MediumOctober 25, 2003
• les visiteurs visiteurs Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as... CVE-2003-1148 Public exploit 7.5 HighOctober 25, 2003
• microsoft windows xp "Shatter" vulnerability in CommCtl32.dll in Windows XP may allow local users to execute arbitrary... CVE-2003-0897 4.6 MediumOctober 25, 2003
• sun jre The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM)... CVE-2003-0896 Public exploit EPSS 14.3% 7.5 HighOctober 25, 2003
• oracle oracle9i Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x... CVE-2003-0894 4.6 MediumOctober 25, 2003
• openslp Symbolic link vulnerability in the slpd script slpd.all_init for OpenSLP before 1.0.11 allows... CVE-2003-0875 2.1 LowOctober 25, 2003
• deskpro Multiple SQL injection vulnerabilities in DeskPRO 1.1.0 and earlier allow remote attackers to... CVE-2003-0874 5.0 MediumOctober 25, 2003
• sco openserver Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other... CVE-2003-0872 2.1 LowOctober 25, 2003
• gnu fileutils, washington university wu-ftpd +1 more ls in the fileutils or coreutils packages allows local users to consume a large amount of memory... CVE-2003-0854 Public exploitFix available 2.1 LowOctober 25, 2003
• gnu fileutils, washington university wu-ftpd +1 more An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a... CVE-2003-0853 Public exploitFix available EPSS 11.1% 5.0 MediumOctober 25, 2003
• sylpheed, sylpheed-claws +1 more Format string vulnerability in send_message.c for Sylpheed-claws 0.9.4 through 0.9.6 allows... CVE-2003-0852 5.0 MediumOctober 25, 2003
• rafal wojtczuk libnids, dug song dsniff +1 more The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory... CVE-2003-0850 Fix available 7.5 HighOctober 25, 2003
• gv, ghostview +1 more gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands... CVE-2002-1569 Fix available 7.5 HighOctober 25, 2003
• apple mac os x nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the... CVE-2001-1412 Public exploit 2.1 LowOctober 25, 2003
• apple mac os x Format string vulnerability in gm4 (aka m4) on Mac OS X may allow local users to gain privileges... CVE-2001-1411 7.2 HighOctober 25, 2003
• chi kien uong guestbook Cross-site scripting (XSS) vulnerability in Chi Kien Uong Guestbook 1.51 allows remote attackers... CVE-2003-1136 Public exploit 4.3 MediumOctober 23, 2003
• Show olderLoading…