Skip to content

CVEs published in December 2003

484 vulnerabilities, 35 critical, 0 exploited.

cisco pix firewall, pix firewall software +1 moreCisco PIX firewall 5.x.x, and 6.3.1 and earlier, allows remote attackers to cause a denial of...CVE-2003-10037.8 HighDecember 17, 2003
cisco catalyst 6500, firewall services module, catalyst 6500 ws-svc-nam-1 +6 more +8 moreCisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows...CVE-2003-10025.0 MediumDecember 17, 2003
cisco catalyst 6500, firewall services module, catalyst 6500 ws-svc-nam-1 +6 more +8 moreBuffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600...CVE-2003-10015.0 MediumDecember 17, 2003
xchatxchat 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC...CVE-2003-10007.5 HighDecember 17, 2003
sun solaris, sunos +1 moreUnknown multiple vulnerabilities in (1) lpstat and (2) the libprint library in Solaris 2.6...CVE-2003-09997.2 HighDecember 17, 2003
broadcom unicenter remote control, ca controlit, broadcom unicenter remote control option +2 moreUnknown "potential system security vulnerability" in Computer Associates (CA) Unicenter Remote...CVE-2003-09984.6 MediumDecember 17, 2003
broadcom unicenter remote control hostUnknown "Denial of Service Attack" vulnerability in Computer Associates (CA) Unicenter Remote...CVE-2003-09975.0 MediumDecember 17, 2003
broadcom unicenter remote control hostUnknown "System Security Vulnerability" in Computer Associates (CA) Unicenter Remote Control (URC...CVE-2003-09964.6 MediumDecember 17, 2003
microsoft windows 2000Buffer overflow in the Microsoft Message Queue Manager (MSQM) allows remote attackers to cause a...CVE-2003-0995EPSS 10.3%7.5 HighDecember 17, 2003
alexander v. lukyanov lftpBuffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier...CVE-2003-0963Public exploitFix availableEPSS 14.7%7.5 HighDecember 17, 2003
sun solaris, sunos +1 moreThe ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary...CVE-2003-10567.2 HighDecember 11, 2003
cisco 80-7111-01 for the unity-svrx255-1a, 80-7112-01 for the unity-svrx255-2a +1 moreCisco Unity on IBM servers is shipped with default settings that should have been disabled by the...CVE-2003-09837.5 HighDecember 11, 2003
cisco application and content networking software, content distribution manager 4630, content distribution manager 4650 +6 more +8 moreBuffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11, and 5.x before 5.0...CVE-2003-09827.5 HighDecember 11, 2003
freescripts visitorbook leFreeScripts VisitorBook LE (visitorbook.pl) logs the reverse DNS name of a visiting host, which...CVE-2003-09816.1 MediumDecember 11, 2003
freescripts visitorbookCross-site scripting (XSS) vulnerability in FreeScripts VisitorBook LE (visitorbook.pl) allows...CVE-2003-09804.3 MediumDecember 11, 2003
freescripts visitorbookFreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which...CVE-2003-09795.0 MediumDecember 11, 2003
gnu privacy guardFormat string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg)...CVE-2003-09787.5 HighDecember 10, 2003
cvs, slackware linux +1 moreCVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and...CVE-2003-0977Fix available7.5 HighDecember 10, 2003
novell netwareNFS Server (XNFS.NLM) for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when...CVE-2003-09767.5 HighDecember 10, 2003
apple mac os x, safari, mac os x server +2 moreApple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to...CVE-2003-09755.0 MediumDecember 10, 2003
sybase adaptive server enterpriseSybase Adaptive Server Enterprise (ASE) 12.5 allows remote attackers to cause a denial of service...CVE-2003-03275.0 MediumDecember 10, 2003
sun solaris, sunos +1 moreUnknown vulnerability in CDE Print Viewer (dtprintinfo) for Sun Solaris 2.6 through 9 may allow...CVE-2003-10577.2 HighDecember 8, 2003
andrew tridgell rsync, engardelinux secure community, secure linux +1 more +3 moreHeap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote...CVE-2003-0962Fix availableEPSS 23.5%7.5 HighDecember 4, 2003
sun solaris, sunos +1 moreThe Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode,...CVE-2003-10583.7 LowDecember 3, 2003
applied watch technologies watch command centerApplied Watch Command Center allows remote attackers to conduct unauthorized activities without...CVE-2003-0974Public exploit7.5 HighDecember 2, 2003
apache mod pythonUnknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote...CVE-2003-0973Fix available5.0 MediumDecember 2, 2003
gnu screenInteger signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier,...CVE-2003-0972Fix available10.0 HighDecember 2, 2003
gnu privacy guardGnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys...CVE-2003-0971Fix available5.0 MediumDecember 2, 2003
sun fireThe Network Management Port on Sun Fire B1600 systems allows remote attackers to cause a denial...CVE-2003-09705.0 MediumDecember 2, 2003
freeradius DebianStack-based buffer overflow in SMB_Logon_Server of the rlm_smb experimental module for FreeRADIUS...CVE-2003-0968Fix available10.0 HighDecember 2, 2003
freeradiusrad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service ...CVE-2003-0967Public exploitFix available5.0 MediumDecember 2, 2003
opencaOpenCA before 0.9.1.4 does not use the correct certificate in a chain to check the serial, which...CVE-2003-09607.5 HighDecember 2, 2003
isc bind, compaq tru64, freebsd +7 more +9 moreISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache...CVE-2003-0914Fix available4.3 MediumDecember 2, 2003
linux kernelInteger overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and...CVE-2003-0961Public exploitFix available7.2 HighDecember 1, 2003