CVEs published in November 2003

65 vulnerabilities, 4 critical, 0 exploited.

• phpbb group phpbb SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to... CVE-2003-1216 Public exploit 7.5 HighNovember 27, 2003
• tildeslash monit Monit 1.4 to 4.1 allows remote attackers to cause a denial of service (daemon crash) via an HTTP... CVE-2003-1084 Fix available 5.0 MediumNovember 24, 2003
• No product listed SQL injection vulnerability in getmember.asp in VieBoard 2.6 Beta 1 allows remote attackers to... CVE-2003-1195 7.5 HighNovember 23, 2003
• openbsd OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and... CVE-2003-0955 Public exploit 4.6 MediumNovember 21, 2003
• sap db The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session... CVE-2003-0945 7.5 HighNovember 21, 2003
• sap db Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows... CVE-2003-0944 7.5 HighNovember 21, 2003
• sap db web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which... CVE-2003-0943 7.5 HighNovember 21, 2003
• sap db Buffer overflow in Web Agent Administration service in web-tools for SAP DB before 7.4.03.30... CVE-2003-0942 7.5 HighNovember 21, 2003
• sap db web-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent... CVE-2003-0941 7.5 HighNovember 21, 2003
• sap db Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows... CVE-2003-0940 5.0 MediumNovember 21, 2003
• sap db eo420_GetStringFromVarPart in veo420.c for SAP database server (SAP DB) 7.4.03.27 and earlier may... CVE-2003-0939 7.5 HighNovember 21, 2003
• sap db vos24u.c in SAP database server (SAP DB) 7.4.03.27 and earlier allows local users to gain SYSTEM... CVE-2003-0938 7.2 HighNovember 21, 2003
• sun solaris, sunos +1 more Unknown vulnerability in the libraries for the PGX32 frame buffer in Solaris 2.5.1 and 2.6... CVE-2003-1059 7.2 HighNovember 20, 2003
• hp hp-ux Partition Manager (parmgr) in HP-UX B.11.23 does not properly validate certificates that are... CVE-2003-0951 7.5 HighNovember 18, 2003
• peoplesoft peopletools PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands... CVE-2003-0950 7.5 HighNovember 18, 2003
• wireless tools tools Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME... CVE-2003-0948 Public exploit 7.2 HighNovember 18, 2003
• wireless tools project tools Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code... CVE-2003-0947 Public exploit 7.2 HighNovember 18, 2003
• clam anti-virus clamav Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other... CVE-2003-0946 Fix available 7.5 HighNovember 18, 2003
• sco open unix, unixware +1 more SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the ... CVE-2003-0937 4.6 MediumNovember 18, 2003
• symantec pcanywhere Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM... CVE-2003-0936 7.2 HighNovember 18, 2003
• gnu glibc, zebra, intel ia64 +4 more +6 more The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a... CVE-2003-0859 4.9 MediumNovember 18, 2003
• gnu zebra, quagga routing software suite +1 more Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service... CVE-2003-0858 Fix available 2.1 LowNovember 18, 2003
• stephen hemminger iproute iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as... CVE-2003-0856 Fix available 4.9 MediumNovember 18, 2003
• microsoft frontpage server extensions, sharepoint team services, windows 2000 +1 more +3 more Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server... CVE-2003-0824 EPSS 36.5% 5.0 MediumNovember 18, 2003
• microsoft frontpage server extensions, sharepoint team services, windows 2000 +1 more +3 more Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server... CVE-2003-0822 Public exploit EPSS 83.0% 7.5 HighNovember 18, 2003
• microsoft word, works +1 more Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a... CVE-2003-0821 EPSS 19.4% 7.5 HighNovember 18, 2003
• microsoft word, works +1 more Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not... CVE-2003-0820 EPSS 26.3% 7.5 HighNovember 18, 2003
• microsoft windows 2000, windows xp +1 more Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL)... CVE-2003-0812 Public exploit EPSS 82.1% 7.5 HighNovember 18, 2003
• gnu zebra, quagga, sgi propack +2 more The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub... CVE-2003-0795 Public exploit 5.0 MediumNovember 18, 2003
• peoplesoft peopletools Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43... CVE-2003-0629 4.3 MediumNovember 18, 2003
• peoplesoft peopletools PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and... CVE-2003-0628 5.0 MediumNovember 18, 2003
• hp hp-ux Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local... CVE-2003-0089 Public exploit 7.2 HighNovember 18, 2003
• minimalist Unknown vulnerability in minimalist mailing list manager 2.4, 2.2, and possibly other versions,... CVE-2003-0902 Fix available 7.5 HighNovember 17, 2003
• peoplesoft peopletools psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary... CVE-2003-0626 5.0 MediumNovember 13, 2003
• net-snmp Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data... CVE-2003-0935 Fix available 6.4 MediumNovember 12, 2003
• symbol technologies pdt Symbol Access Portable Data Terminal (PDT) 8100 does not hide the default WEP keys if they are... CVE-2003-0934 4.6 MediumNovember 12, 2003
• hylafax Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to... CVE-2003-0886 Public exploitFix available EPSS 12.7% 10.0 HighNovember 12, 2003
• omega-rpg Buffer overflow in omega-rpg 0.90 allows local users to execute arbitrary code via a long (1)... CVE-2003-0932 Fix available 4.6 MediumNovember 11, 2003
• conquest Buffer overflow in conquest 7.2 and earlier may allow a local user to execute arbitrary code via... CVE-2003-0933 Fix available 4.6 MediumNovember 10, 2003
• ethereal group ethereal Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a... CVE-2003-0927 7.5 HighNovember 6, 2003
• ethereal group ethereal Ethereal 0.9.15 and earlier, and Tethereal, allows remote attackers to cause a denial of service ... CVE-2003-0926 5.0 MediumNovember 6, 2003
• ethereal group ethereal Buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of... CVE-2003-0925 7.5 HighNovember 6, 2003
• apple mac os x, mac os x server +1 more Unknown vulnerability in the Terminal application for Mac OS X 10.3 (Client and Server) may allow... CVE-2003-0913 4.6 MediumNovember 6, 2003
• openssl, cisco css11000 content services switch, ios +2 more +4 more OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion)... CVE-2003-0851 5.0 MediumNovember 6, 2003
• sco open unix, unixware +1 more Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a... CVE-2003-0834 Public exploit 7.2 HighNovember 6, 2003
• easy software products cups Unknown vulnerability in the Internet Printing Protocol (IPP) implementation in CUPS before 1.1... CVE-2003-0788 Fix available 5.0 MediumNovember 6, 2003
• No product listed Multiple vulnerabilities in multiple vendor implementations of the X.400 protocol allow remote... CVE-2003-0565 5.0 MediumNovember 6, 2003
• hitachi groupmax mail - security option, pki runtime library +1 more Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet... CVE-2003-0564 5.0 MediumNovember 6, 2003
• bea weblogic server Cross-site scripting (XSS) vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier... CVE-2003-0624 Public exploit 4.3 MediumNovember 5, 2003
• bea tuxedo, weblogic server +1 more Cross-site scripting (XSS) vulnerability in the Administration Console for BEA Tuxedo 8.1 and... CVE-2003-0623 4.3 MediumNovember 5, 2003
• Show olderLoading…