Overview 2,009 matches · 18 in Waratek scope · 1 protected · 0 exploited · 0 CISA KEV · 83 EPSS ≥ 0.5
Protected by Waratek
1
0.0%
Rule in development
0
0.0%
Mitigation candidate
17
0.8%
No exploit published
0
0.0%
Outside Waratek scope
10
0.5%
Not applicable
1,977
98.4%
Withdrawn CVE
4
0.2%
blocked by ARMR today
1
0.0%
partly blocked
0
0.0%
not blocked
2,008
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
2,009
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 545 / year
19881
Not applicable1
High1
not blocked1
Working exploit published1
19890
19901
Not applicable1
Medium1
not blocked1
Working exploit published1
19912
Not applicable2
High2
not blocked2
Working exploit published2
19920
19930
19946
Not applicable6
High3
Medium2
Low1
not blocked6
Working exploit published6
19955
Not applicable5
Critical1
High2
Medium2
not blocked5
Working exploit published5
199618
Not applicable17
Withdrawn CVE1
High12
Medium5
Unknown1
not blocked18
Working exploit published18
199773
Not applicable73
High51
Medium18
Low4
not blocked73
Working exploit published73
199850
Not applicable50
Critical1
High33
Medium11
Low5
not blocked50
Working exploit published50
1999282
Outside Waratek scope1
Not applicable280
Withdrawn CVE1
Critical2
High132
Medium119
Low28
Unknown1
not blocked282
Working exploit published282
2000427
Mitigation candidate6
Outside Waratek scope1
Not applicable420
Critical1
High197
Medium195
Low34
not blocked427
Working exploit published427
2001480
Mitigation candidate2
Outside Waratek scope4
Not applicable474
Critical4
High219
Medium219
Low38
not blocked480
Working exploit published480
2002545
Mitigation candidate8
Outside Waratek scope4
Not applicable531
Withdrawn CVE2
Critical3
High276
Medium246
Low18
Unknown2
not blocked545
Working exploit published545
2003119
Protected by Waratek1
Mitigation candidate1
Not applicable117
Critical1
High60
Medium57
Low1
blocked by ARMR today1
not blocked118
Working exploit published119
19891991199319951997199920012003
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2003-0274 | High | 2003-05-27 | Not applicable | Working exploit published | Buffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute arbitrary code via a long ULISTPROC_UMASK value. |
| CVE-2003-0269 | High | 2003-05-27 | Not applicable | Working exploit published | Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable. |
| CVE-2003-0265 | Medium | 2003-05-27 | Not applicable | Working exploit published | Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain root privileges by modifying the files before the permissions are changed. |
| CVE-2003-0264 | High | 2003-05-27 | Not applicable | Working exploit published | Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server. |
| CVE-2003-0263 | High | 2003-05-27 | Not applicable | Working exploit published | Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) 1.22 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands. |
| CVE-2003-0262 | High | 2003-05-27 | Not applicable | Working exploit published | leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges, which KATAXWR is not designed to have. |
| CVE-2003-0243 | High | 2003-05-27 | Not applicable | Working exploit published | Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter for the (1) normal_html.cgi or (2) member_html.cgi scripts. |
| CVE-2003-0228 | High | 2003-05-27 | Not applicable | Working exploit published | Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed in an arbitrary location. |
| CVE-2003-0339 | High | 2003-05-22 | Not applicable | Working exploit published | Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HTTP requests. |
| CVE-2003-0336 | Medium | 2003-05-22 | Not applicable | Working exploit published | Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a carriage return (CR) character in a spoofed "Attachment Converted:" string, which is not properly handled by Eudora. |
| CVE-2003-0338 | Medium | 2003-05-21 | Not applicable | Working exploit published | Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequences in HTTP GET or POST requests. |
| CVE-2003-0220 | High | 2003-05-12 | Not applicable | Working exploit published | Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet. |
| CVE-2003-0215 | High | 2003-05-12 | Not applicable | Working exploit published | SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via the (1) username and (2) password fields, and possibly other fields. |
| CVE-2003-0213 | High | 2003-05-12 | Not applicable | Working exploit published | ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow. |
| CVE-2003-0190 | Medium | 2003-05-12 | Not applicable | Working exploit published | OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack. |
| CVE-2003-0118 | High | 2003-05-12 | Not applicable | Working exploit published | SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to (1) rawdocdata.asp or (2) RawCustomSearchField.asp containing an embedded SQL statement. |
| CVE-2003-0117 | High | 2003-05-12 | Not applicable | Working exploit published | Buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver. |
| CVE-2003-0113 | High | 2003-05-12 | Not applicable | Working exploit published | Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP response containing long values in (1) Content-type and (2) Content-encoding fields. |
| CVE-2003-1146 | Medium | 2003-05-11 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the dir parameter. |
| CVE-2003-0211 | Medium | 2003-05-05 | Not applicable | Working exploit published | Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service (memory consumption) via a large number of rejected connections. |
| CVE-2003-0209 | High | 2003-05-05 | Not applicable | Working exploit published | Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow. |
| CVE-2003-0171 | High | 2003-05-05 | Not applicable | Working exploit published | DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program. |
| CVE-2002-1484 | Critical | 2003-04-22 | Not applicable | Working exploit published | DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error message. |
| CVE-2002-1483 | Medium | 2003-04-22 | Not applicable | Working exploit published | db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form (1) C: (drive letter), (2) //absolute/path (double-slash), or (3) .. (dot-dot). |
| CVE-2002-1482 | High | 2003-04-22 | Not applicable | Working exploit published | SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote attackers to gain administrative privileges via SQL code in the password entry. |
| CVE-2002-1481 | High | 2003-04-22 | Not applicable | Working exploit published | savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a denial of service or execute arbitrary PHP code by using savesettings.php to modify config.php. |
| CVE-2002-1480 | Medium | 2003-04-22 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script into guestbook pages, which is executed when the administrator deletes the entry. |
| CVE-2002-1473 | Medium | 2003-04-22 | Not applicable | Working exploit published | Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of service and possibly execute arbitrary code. |
| CVE-2002-1469 | High | 2003-04-22 | Not applicable | Working exploit published | scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remote authenticated users to bypass access controls by uploading malicious programs and modifying the PATH variable in $HOME/.ssh/environment to locate those programs. |
| CVE-2002-1468 | High | 2003-04-22 | Not applicable | Working exploit published | Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root. |
| CVE-2003-1054 | Medium | 2003-04-16 | Not applicable | Working exploit published | mod_access_referer 1.0.2 allows remote attackers to cause a denial of service (crash) via a malformed Referer header that is missing a hostname, as parsed by the ap_parse_uri_components function in Apache, which triggers a null dereference. |
| CVE-2003-0203 | High | 2003-04-11 | Not applicable | Working exploit published | Buffer overflow in moxftp 2.2 and earlier allows remote malicious FTP servers to execute arbitrary code via a long FTP banner. |
| CVE-2003-0169 | Medium | 2003-04-11 | Not applicable | Working exploit published | hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of service (CPU consumption) via a request to hpnst.exe that calls itself, which causes an infinite loop. |
| CVE-2003-0132 | Medium | 2003-04-11 | Not applicable | Working exploit published | A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache to allocate 80 bytes for each linefeed. |
| CVE-2002-1436 | High | 2003-04-11 | Not applicable | Working exploit published | The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request. |
| CVE-2002-1435 | High | 2003-04-11 | Not applicable | Working exploit published | class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrary PHP code when the 'allow_url_fopen' setting is enabled via a URL in the config_atkroot parameter that points to the code. |
| CVE-2002-1434 | Medium | 2003-04-11 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML script as other users via certain URLs. |
| CVE-2002-1432 | Medium | 2003-04-11 | Not applicable | Working exploit published | MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database. |
| CVE-2002-1429 | Medium | 2003-04-11 | Not applicable | Working exploit published | Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter. |
| CVE-2002-1428 | High | 2003-04-11 | Not applicable | Working exploit published | index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the user_cookie parameter set to 1. |
| CVE-2002-1427 | High | 2003-04-11 | Not applicable | Working exploit published | The print_html_to_file function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users. |
| CVE-2002-1426 | High | 2003-04-11 | Not applicable | Working exploit published | HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service (crash) via an SNMP write request containing 85 characters, possibly triggering a buffer overflow. |
| CVE-2002-1423 | Medium | 2003-04-11 | Not applicable | Working exploit published | tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the file parameter. |
| CVE-2002-1422 | Medium | 2003-04-11 | Not applicable | Working exploit published | admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest parameters. |
| CVE-2002-1414 | Medium | 2003-04-11 | Not applicable | Working exploit published | Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMIN_TEMPLATEDIR environment variable. |
| CVE-2002-1412 | High | 2003-04-11 | Not applicable | Working exploit published | Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY_BASEDIR variable that points to a directory or URL that contains a Trojan horse init.php script. |
| CVE-2002-1410 | High | 2003-04-11 | Not applicable | Working exploit published | Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to (1) delete entries via direct access of admin.cgi, or (2) reconfigure Guestbook via direct access of config.cgi. |
| CVE-2002-1143 | Medium | 2003-04-11 | Not applicable | Working exploit published | Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka "Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure." |
| CVE-2003-0172 | High | 2003-04-02 | Not applicable | Working exploit published | Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument. |
| CVE-2003-0166 | High | 2003-04-02 | Not applicable | Working exploit published | Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions. |
| CVE-2003-0165 | Medium | 2003-04-02 | Not applicable | Working exploit published | Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display. |
| CVE-2003-0161 | High | 2003-04-02 | Not applicable | Working exploit published | The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337. |
| CVE-2003-0154 | Medium | 2003-04-02 | Not applicable | Working exploit published | Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244. |
| CVE-2003-0153 | Medium | 2003-04-02 | Not applicable | Working exploit published | bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi. |
| CVE-2002-1561 | Medium | 2003-04-02 | Not applicable | Working exploit published | The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference. |
| CVE-2002-1527 | Medium | 2003-04-02 | Not applicable | Working exploit published | emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing script, which generates a regular expression matching error that includes the pathname in the resulting error message. |
| CVE-2002-1526 | Medium | 2003-04-02 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary HTML or script via the email address field. |
| CVE-2002-1525 | Medium | 2003-04-02 | Not applicable | Working exploit published | Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or (3) an absolute pathname to port 6017. |
| CVE-2002-1522 | Medium | 2003-04-02 | Not applicable | Working exploit published | Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long USER argument. |
| CVE-2002-1514 | High | 2003-04-02 | Not applicable | Working exploit published | gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file. |
| CVE-2002-1513 | Medium | 2003-04-02 | Not applicable | Working exploit published | The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges. |
| CVE-2002-1512 | Medium | 2003-04-02 | Not applicable | Working exploit published | xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbru_dscheck.dd temporary file. |
| CVE-2002-1506 | High | 2003-04-02 | Not applicable | Working exploit published | Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflows an error string that is generated. |
| CVE-2002-1505 | High | 2003-04-02 | Not applicable | Working exploit published | SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers to modify the database and possibly gain privileges via the boardid parameter. |
| CVE-2002-1503 | High | 2003-04-02 | Not applicable | Working exploit published | Buffer overflow in Automatic File Distributor (AFD) 1.2.14 and earlier allows local users to gain privileges via a long MON_WORK_DIR environment variable or -w (workdir) argument to (1) afd, (2) afdcmd, (3) afd_ctrl, (4) init_afd, (5) mafd, (6) mon_ctrl, (7) show_olog, or (8) udc. |
| CVE-2002-1501 | Medium | 2003-04-02 | Not applicable | Working exploit published | The MPS functionality in Enterasys SSR8000 (Smart Switch Router) before firmware 8.3.0.10 allows remote attackers to cause a denial of service (crash) via multiple port scans to ports 15077 and 15078. |
| CVE-2002-1499 | High | 2003-04-02 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via (1) the authornumber parameter in author.asp, (2) the discussblurbid parameter in discuss.asp, (3) the name parameter in holdcomment.asp, and (4) the email parameter in holdcomment.asp. |
| CVE-2002-1497 | Medium | 2003-04-02 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a "404 Not Found" response. |
| CVE-2002-1496 | High | 2003-04-02 | Not applicable | Working exploit published | Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via a negative value in the Content-Length HTTP header. |
| CVE-2002-1495 | Medium | 2003-04-02 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML via (1) attached file names in the Read Mail feature, (2) text/html mails that are displayed in a pop-up window, and (3) certain malicious attributes within otherwise safe tags, such as onMouseOver. |
| CVE-2002-1494 | Medium | 2003-04-02 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows remote attackers to insert arbitrary HTML or script by inserting the script after a trailing / character, which inserts the script into the resulting error message. |
| CVE-2002-1493 | Medium | 2003-04-02 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script via (1) STYLE attributes or (2) SRC attributes in an IMG tag. |
| CVE-2002-1492 | High | 2003-04-02 | Not applicable | Working exploit published | Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via (1) close_tunnel and (2) open_tunnel. |
| CVE-2002-1489 | High | 2003-04-02 | Not applicable | Working exploit published | Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long URL or (2) a request with a long method name. |
| CVE-2002-1488 | Medium | 2003-04-02 | Not applicable | Working exploit published | The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) via a PART message with (1) a missing channel or (2) a channel that the Trillian user is not in. |
| CVE-2002-1487 | Medium | 2003-04-02 | Not applicable | Working exploit published | The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by sending the raw messages (1) 206, (2) 211, (3) 213, (4) 214, (5) 215, (6) 217, (7) 218, (8) 243, (9) 302, (10) 317, (11) 324, (12) 332, (13) 333, (14) 352, and (15) 367. |
| CVE-2002-1486 | High | 2003-04-02 | Not applicable | Working exploit published | Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via (1) a large response from the server, (2) a JOIN with a long channel name, (3) a long "raw 221" message, (4) a PRIVMSG with a long nickname, or (5) a long response from an IDENT server. |
| CVE-2003-0144 | High | 2003-03-31 | Not applicable | Working exploit published | Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name. |
| CVE-2003-0085 | High | 2003-03-31 | Not applicable | Working exploit published | Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code. |
| CVE-2002-1560 | High | 2003-03-31 | Not applicable | Working exploit published | index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to true. |
| CVE-2002-1559 | Medium | 2003-03-31 | Not applicable | Working exploit published | Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (drive letter) or (2) .. (dot-dot) sequences in the page parameter. |
| CVE-2002-1549 | High | 2003-03-31 | Not applicable | Working exploit published | Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request. |
| CVE-2002-1542 | Medium | 2003-03-31 | Not applicable | Working exploit published | SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow. |
| CVE-2002-1539 | Medium | 2003-03-31 | Not applicable | Working exploit published | Buffer overflow in MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service via long (1) DELE or (2) UIDL arguments. |
| CVE-2002-1533 | Medium | 2003-03-31 | Mitigation candidate | Working exploit published | Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a). |
| CVE-2002-1530 | Medium | 2003-03-31 | Not applicable | Working exploit published | The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form. |
| CVE-2002-1529 | Medium | 2003-03-31 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter. |
| CVE-2003-0150 | High | 2003-03-24 | Not applicable | Working exploit published | MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf. |
| CVE-2003-0130 | Medium | 2003-03-24 | Not applicable | Working exploit published | The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers to inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image. |
| CVE-2003-0129 | Medium | 2003-03-24 | Not applicable | Working exploit published | Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (memory consumption) via a mail message that is uuencoded multiple times. |
| CVE-2003-0128 | Medium | 2003-03-24 | Not applicable | Working exploit published | The try_uudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malicious uuencoded (UUE) header, possibly triggering a heap-based buffer overflow. |
| CVE-2003-1203 | Medium | 2003-03-18 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in index.php for Mambo Site Server 4.0.10 allows remote attackers to execute script on other clients via the ?option parameter. |
| CVE-2003-0143 | High | 2003-03-18 | Not applicable | Working exploit published | The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name. |
| CVE-2003-0125 | Medium | 2003-03-18 | Not applicable | Working exploit published | Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a denial of service (reboot) and execute arbitrary code via a long GET /OPTIONS value. |
| CVE-2003-0124 | Medium | 2003-03-18 | Not applicable | Working exploit published | man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes the my_xsprintf function to return a string with the value "unsafe," which is then executed as a program via a system call if it is in the search path of the user who runs man. |
| CVE-2003-0121 | High | 2003-03-18 | Not applicable | Working exploit published | Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not specify a MIME-Version header field, which is processed by some mail clients. |
| CVE-2003-0102 | Medium | 2003-03-18 | Not applicable | Working exploit published | Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize). |
| CVE-2003-0108 | Medium | 2003-03-07 | Not applicable | Working exploit published | isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop. |
| CVE-2003-0107 | High | 2003-03-07 | Not applicable | Working exploit published | Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code. |
| CVE-2003-0009 | Medium | 2003-03-07 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary script in the Local Computer security context via an hcp:// URL with the malicious script in the topic parameter. |