CVEs published in October 2003
92 vulnerabilities, 9 critical, 0 exploited.
- opera browserHeap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary...7.5 High
- gnome gdmGDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not limit the number or duration of...2.1 Low
- gnome gdmGDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not restrict the size of input,...2.1 Low
- fetchmailFetchmail 6.2.4 and earlier does not properly allocate memory for long lines, which allows remote...5.0 Medium
- mpg123Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote...7.5 High
- microsoft windows nt, windows 2000, windows 2003 server +2 more +4 moreThe Messenger Service for Windows NT through Server 2003 does not properly verify the length of...7.5 High
- microsoft exchange serverThe Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to...7.5 High
- microsoft exchange serverCross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in...4.3 Medium
- microsoft windows xp, windows 2000, windows 2003 server +2 more +4 moreStack-based buffer overflow in the PCHealth system in the Help and Support Center function in...7.5 High
- microsoft windows 2000Buffer overflow in Troubleshooter ActiveX Control (Tshoot.ocx) in Microsoft Windows 2000 SP4 and...9.3 High
- microsoft windows nt, windows 2000, windows 2003 server +1 more +3 moreThe Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user...7.5 High
- microsoft windows nt, windows 2000, windows 2003 server +1 more +3 moreBuffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users...7.2 High
- No product listedUnknown vulnerability in the sysinfo system call for Solaris for SPARC 2.6 through 9, and Solaris...4.6 Medium
- ircnet ircdBuffer overflow in m_join in channel.c for IRCnet IRCD 2.10.x to 2.10.3p3 allows remote attackers...5.0 Medium
- phpThe php_check_safe_mode_include_dir function in fopen_wrappers.c of PHP 4.3.x returns a success...7.5 High
- phpInteger overflows in (1) base64_encode and (2) the GD library for PHP before 4.3.3 have unknown...10.0 High
- phpBuffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors.10.0 High
- microsoft windows 2000, windows 98, windows nt +2 more +4 moreA multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch...5.1 Medium
- apache tomcatApache Tomcat Denial of Service vulnerability in the Catalina package5.0 Medium
- sun solaris, sunos +1 moreRace condition in Solaris 2.6 through 9 allows local users to cause a denial of service (kernel...1.2 Low
- gnu cfengineBuffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute...7.5 High
- slocateHeap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local...4.6 Medium
- suse linuxSuSEconfig.susewm in the susewm package on SuSE Linux 8.2Pro allows local users to overwrite...4.6 Medium
- suse linuxSuSEconfig.javarunt in the javarunt package on SuSE Linux 7.3Pro allows local users to overwrite...4.6 Medium
- jbossUnknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms,...7.5 High
- schroepl mod gzipmod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode...7.1 High
- dag apt repository mod gzipFormat string vulnerability in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly...7.5 High
- dag apt repository mod gzipStack-based buffer overflow in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly...7.5 High
- oracle peopletoolsThe grid option in PeopleSoft 8.42 stores temporary .xls files in guessable directories under the...5.0 Medium
- hp hp-uxBuffer overflow in dtprintinfo on HP-UX 11.00, and possibly other operating systems, allows local...7.2 High
- microsoft windows 2003 serverDirectory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server...5.0 Medium
- ibm db2 universal databaseStack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a,...7.5 High
- ibm db2 universal databaseStack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1...7.5 High
- microsoft internet explorer, ie +1 moreInternet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web...7.5 High
- opensslOpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe...5.0 Medium
- microsoft internet explorer, ie +1 moreInternet Explorer allows remote attackers to bypass zone restrictions to inject and execute...7.5 High
- mozilla, sco openserver +1 moreThe Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to...9.8 Critical
- xshisenMultiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long (1) ...4.6 Medium
- mplayerMultiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to...7.5 High
- opensslDouble free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service ...9.8 Critical
- opensslOpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs,...5.0 Medium
- opensslInteger overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service ...5.0 Medium