Overview 3,274 matches · 29 in Waratek scope · 2 protected · 33 exploited · 1 CISA KEV · 1,016 public PoC · 72 EPSS ≥ 0.5
3,274matches
29in Waratek scope0.9%
2protected0.1%
33exploited1.0%
1CISA KEV0.0%
1,016public PoC31.0%
72EPSS ≥ 0.52.2%
Protected by Waratek
2
0.1%
Rule in development
0
0.0%
Mitigation candidate
4
0.1%
No exploit published
23
0.7%
Outside Waratek scope
18
0.5%
Not applicable
3,227
98.6%
Withdrawn CVE
0
0.0%
blocked by ARMR today
2
0.1%
partly blocked
0
0.0%
not blocked
3,272
99.9%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
33
1.0%
Working exploit published
988
30.2%
Proof of concept only
0
0.0%
Forecast only
5
0.2%
No public exploit
2,248
68.7%
split by
peak 1,023 / year
19882
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
19892
Not applicable2
High2
not blocked2
No public exploit2
19908
Not applicable8
High8
not blocked8
No public exploit8
199111
Not applicable11
High11
not blocked11
Working exploit published2
No public exploit9
199212
Not applicable12
High12
not blocked12
No public exploit12
19938
Not applicable8
High8
not blocked8
No public exploit8
199414
Not applicable14
High14
not blocked14
Working exploit published3
No public exploit11
199517
Not applicable17
High17
not blocked17
Working exploit published2
No public exploit15
199643
No exploit published1
Not applicable42
High43
not blocked43
Working exploit published12
Forecast only1
No public exploit30
1997143
Not applicable143
High143
not blocked143
Exploited2
Working exploit published51
No public exploit90
1998137
Not applicable137
High137
not blocked137
Exploited1
Working exploit published33
No public exploit103
1999423
No exploit published2
Not applicable421
High423
not blocked423
Exploited2
Working exploit published132
No public exploit289
2000454
Mitigation candidate2
No exploit published3
Outside Waratek scope2
Not applicable447
High454
not blocked454
Exploited3
Working exploit published197
Forecast only1
No public exploit253
2001776
Protected by Waratek1
No exploit published6
Outside Waratek scope5
Not applicable764
High776
blocked by ARMR today1
not blocked775
Exploited11
Working exploit published219
No public exploit546
20021,023
Protected by Waratek1
Mitigation candidate2
No exploit published8
Outside Waratek scope8
Not applicable1,004
High1,023
blocked by ARMR today1
not blocked1,022
Exploited9
Working exploit published276
Forecast only3
No public exploit735
2003201
No exploit published3
Outside Waratek scope3
Not applicable195
High201
not blocked201
Exploited5
Working exploit published60
No public exploit136
19891991199319951997199920012003
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2003-0274 | High | 2003-05-27 | Not applicable | Working exploit published | Buffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute arbitrary code via a long ULISTPROC_UMASK value. |
| CVE-2003-0272 | High | 2003-05-27 | Not applicable | No public exploit | admin.php in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cookie to an "adminok" value. |
| CVE-2003-0271 | High | 2003-05-27 | Not applicable | No public exploit | Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument. |
| CVE-2003-0269 | High | 2003-05-27 | Not applicable | Working exploit published | Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable. |
| CVE-2003-0266 | High | 2003-05-27 | Not applicable | No public exploit | Multiple buffer overflows in SLWebMail 3 on Windows systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long Language parameter to showlogin.dll, (2) a long CompanyID parameter to recman.dll, (3) a long CompanyID parameter to admin.dll, or (4) a long CompanyID parameter to globallogin.dll. |
| CVE-2003-0264 | High | 2003-05-27 | Not applicable | Working exploit published | Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server. |
| CVE-2003-0263 | High | 2003-05-27 | Not applicable | Working exploit published | Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) 1.22 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands. |
| CVE-2003-0262 | High | 2003-05-27 | Not applicable | Working exploit published | leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges, which KATAXWR is not designed to have. |
| CVE-2003-0258 | High | 2003-05-27 | Not applicable | No public exploit | Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication. |
| CVE-2003-0256 | High | 2003-05-27 | Not applicable | No public exploit | The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows remote attackers to execute arbitrary commands. |
| CVE-2003-0255 | High | 2003-05-27 | Not applicable | No public exploit | The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, which prevents GnuPG from warning the encrypting user when a user ID does not have a trusted path. |
| CVE-2003-0243 | High | 2003-05-27 | Not applicable | Working exploit published | Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter for the (1) normal_html.cgi or (2) member_html.cgi scripts. |
| CVE-2003-0237 | High | 2003-05-27 | Not applicable | No public exploit | The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack. |
| CVE-2003-0236 | High | 2003-05-27 | Not applicable | No public exploit | Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subject or (2) Date headers. |
| CVE-2003-0235 | High | 2003-05-27 | Not applicable | No public exploit | Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command. |
| CVE-2003-0228 | High | 2003-05-27 | Not applicable | Working exploit published | Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed in an arbitrary location. |
| CVE-2003-0339 | High | 2003-05-22 | Not applicable | Working exploit published | Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HTTP requests. |
| CVE-2003-0335 | High | 2003-05-22 | Not applicable | No public exploit | rc.M in Slackware 9.0 calls quotacheck with the -M option, which causes the filesystem to be remounted and possibly reset security-relevant mount flags such as nosuid, nodev, and noexec. |
| CVE-2003-0340 | High | 2003-05-21 | Not applicable | No public exploit | Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, which allows attackers to steal login names and passwords to gain privileges. |
| CVE-2003-0333 | High | 2003-05-19 | Not applicable | No public exploit | Multiple buffer overflows in kermit in HP-UX 10.20 and 11.00 (C-Kermit 6.0.192 and possibly other versions before 8.0) allow local users to gain privileges via long arguments to (1) ask, (2) askq, (3) define, (4) assign, and (5) getc, some of which may share the same underlying function "doask," a different vulnerability than CVE-2001-0085. |
| CVE-2003-0308 | High | 2003-05-15 | Not applicable | No public exploit | The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl. |
| CVE-2003-0233 | High | 2003-05-12 | Not applicable | No public exploit | Heap-based buffer overflow in plugin.ocx for Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via the Load() method, a different vulnerability than CVE-2003-0115. |
| CVE-2003-0222 | High | 2003-05-12 | Outside Waratek scope | No public exploit | Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter. |
| CVE-2003-0221 | High | 2003-05-12 | Not applicable | No public exploit | The (1) dupatch and (2) setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allows local users to overwrite files and possibly gain root privileges via a symlink attack. |
| CVE-2003-0220 | High | 2003-05-12 | Not applicable | Working exploit published | Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet. |
| CVE-2003-0219 | High | 2003-05-12 | Not applicable | No public exploit | Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute administrator commands by sniffing packets from a valid session and replaying them against the remote administration server. |
| CVE-2003-0218 | High | 2003-05-12 | Not applicable | No public exploit | Buffer overflow in PostMethod() function for Monkey HTTP Daemon (monkeyd) 0.6.1 and earlier allows remote attackers to execute arbitrary code via a POST request with a large body. |
| CVE-2003-0216 | High | 2003-05-12 | Not applicable | No public exploit | Unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to the enable mode without a password. |
| CVE-2003-0215 | High | 2003-05-12 | Not applicable | Working exploit published | SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via the (1) username and (2) password fields, and possibly other fields. |
| CVE-2003-0213 | High | 2003-05-12 | Not applicable | Working exploit published | ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow. |
| CVE-2003-0212 | High | 2003-05-12 | Not applicable | No public exploit | handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes full and sets an array index incorrectly, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of connections. |
| CVE-2003-0210 | High | 2003-05-12 | Not applicable | No public exploit | Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002. |
| CVE-2003-0205 | High | 2003-05-12 | Not applicable | No public exploit | gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI. |
| CVE-2003-0118 | High | 2003-05-12 | Not applicable | Working exploit published | SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to (1) rawdocdata.asp or (2) RawCustomSearchField.asp containing an embedded SQL statement. |
| CVE-2003-0117 | High | 2003-05-12 | Not applicable | Working exploit published | Buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver. |
| CVE-2003-0115 | High | 2003-05-12 | Not applicable | No public exploit | Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check parameters that are passed during third party rendering, which could allow remote attackers to execute arbitrary web script, aka the "Third Party Plugin Rendering" vulnerability, a different vulnerability than CVE-2003-0233. |
| CVE-2003-0113 | High | 2003-05-12 | Not applicable | Working exploit published | Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP response containing long values in (1) Content-type and (2) Content-encoding fields. |
| CVE-2003-0084 | High | 2003-05-12 | Not applicable | No public exploit | mod_auth_any package in Red Hat Enterprise Linux 2.1 and other operating systems does not properly escape arguments when calling other programs, which allows attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2003-0209 | High | 2003-05-05 | Not applicable | Working exploit published | Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow. |
| CVE-2003-0204 | High | 2003-05-05 | Not applicable | No public exploit | KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or (2) PDF files, related to missing -dPARANOIDSAFER and -dSAFER arguments when using the kghostview Ghostscript viewer. |
| CVE-2003-0201 | High | 2003-05-05 | Not applicable | Exploited | Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code. |
| CVE-2003-0196 | High | 2003-05-05 | Not applicable | No public exploit | Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different vulnerability than CVE-2003-0201. |
| CVE-2003-0173 | High | 2003-05-05 | Not applicable | No public exploit | xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges. |
| CVE-2003-0171 | High | 2003-05-05 | Not applicable | Working exploit published | DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program. |
| CVE-2003-0111 | High | 2003-05-05 | Not applicable | Exploited | The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security checks and execute arbitrary code via a malicious Java applet, aka "Flaw in Microsoft VM Could Enable System Compromise." |
| CVE-2002-1482 | High | 2003-04-22 | Not applicable | Working exploit published | SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote attackers to gain administrative privileges via SQL code in the password entry. |
| CVE-2002-1481 | High | 2003-04-22 | Not applicable | Working exploit published | savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a denial of service or execute arbitrary PHP code by using savesettings.php to modify config.php. |
| CVE-2002-1478 | High | 2003-04-22 | Not applicable | No public exploit | Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode. |
| CVE-2002-1477 | High | 2003-04-22 | Not applicable | No public exploit | graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode. |
| CVE-2002-1469 | High | 2003-04-22 | Not applicable | Working exploit published | scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remote authenticated users to bypass access controls by uploading malicious programs and modifying the PATH variable in $HOME/.ssh/environment to locate those programs. |
| CVE-2002-1468 | High | 2003-04-22 | Not applicable | Working exploit published | Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root. |
| CVE-2002-1466 | High | 2003-04-22 | Not applicable | No public exploit | CafeLog b2 Weblog Tool 2.06pre4, with allow_fopen_url enabled, allows remote attackers to execute arbitrary PHP code via the b2inc variable. |
| CVE-2002-1465 | High | 2003-04-22 | Not applicable | No public exploit | SQL injection vulnerability in CafeLog b2 Weblog Tool allows remote attackers to execute arbitrary SQL code via the tablehosts variable. |
| CVE-2003-0203 | High | 2003-04-11 | Not applicable | Working exploit published | Buffer overflow in moxftp 2.2 and earlier allows remote malicious FTP servers to execute arbitrary code via a long FTP banner. |
| CVE-2003-0197 | High | 2003-04-11 | Not applicable | No public exploit | Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK). |
| CVE-2003-0135 | High | 2003-04-11 | Not applicable | No public exploit | vsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers (tcp_wrappers) but is installed as a standalone service, which inadvertently prevents vsftpd from restricting access as intended. |
| CVE-2002-1442 | High | 2003-04-11 | Not applicable | No public exploit | The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as "My Computer" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location to the toolbar's configuration URL, which bypasses the origin verification check. |
| CVE-2002-1441 | High | 2003-04-11 | Not applicable | No public exploit | Multiple buffer overflows in Tomahawk SteelArrow before 4.5 allow remote attackers to execute arbitrary code via (1) the Steelarrow Service (Steelarrow.exe) using a long UserIdent Cookie header, (2) DLLHOST.EXE (Steelarrow.dll) via a request for a long .aro file, or (3) DLLHOST.EXE via a Chunked Transfer-Encoding request. |
| CVE-2002-1440 | High | 2003-04-11 | Not applicable | No public exploit | The Gateway GS-400 server has a default root password of "0001n" that can not be changed via the administrative interface, which can allow attackers to gain root privileges. |
| CVE-2002-1436 | High | 2003-04-11 | Not applicable | Working exploit published | The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request. |
| CVE-2002-1435 | High | 2003-04-11 | Not applicable | Working exploit published | class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrary PHP code when the 'allow_url_fopen' setting is enabled via a URL in the config_atkroot parameter that points to the code. |
| CVE-2002-1431 | High | 2003-04-11 | Not applicable | No public exploit | Belkin F5D5230-4 4-Port Cable/DSL Gateway Router 1.20.000 modifies the source IP address of internal packets to that of the router's external interface when forwarding a request from an internal host to an internal web server, which allows remote attackers to hide which host is being used to access the web server. |
| CVE-2002-1428 | High | 2003-04-11 | Not applicable | Working exploit published | index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the user_cookie parameter set to 1. |
| CVE-2002-1427 | High | 2003-04-11 | Not applicable | Working exploit published | The print_html_to_file function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users. |
| CVE-2002-1426 | High | 2003-04-11 | Not applicable | Working exploit published | HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service (crash) via an SNMP write request containing 85 characters, possibly triggering a buffer overflow. |
| CVE-2002-1421 | High | 2003-04-11 | Not applicable | No public exploit | SQL injection vulnerabilities in FUDforum before 2.2.0 allow remote attackers to perform unauthorized database operations via (1) report.php, (2) selmsg.php, and (3) showposts.php. |
| CVE-2002-1420 | High | 2003-04-11 | Not applicable | No public exploit | Integer signedness error in select() on OpenBSD 3.1 and earlier allows local users to overwrite arbitrary kernel memory via a negative value for the size parameter, which satisfies the boundary check as a signed integer, but is later used as an unsigned integer during a data copying operation. |
| CVE-2002-1419 | High | 2003-04-11 | Not applicable | No public exploit | The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system, which could modify intended access restrictions that are based on a MAC address. |
| CVE-2002-1413 | High | 2003-04-11 | Not applicable | No public exploit | RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication using the RconJ "Secure IP" (SSL) option during a connection. |
| CVE-2002-1412 | High | 2003-04-11 | Not applicable | Working exploit published | Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY_BASEDIR variable that points to a directory or URL that contains a Trojan horse init.php script. |
| CVE-2002-1410 | High | 2003-04-11 | Not applicable | Working exploit published | Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to (1) delete entries via direct access of admin.cgi, or (2) reconfigure Guestbook via direct access of config.cgi. |
| CVE-2002-1408 | High | 2003-04-11 | Not applicable | No public exploit | Unknown vulnerability or vulnerabilities in HP OpenView EMANATE 14.2 snmpModules allow the SNMP read-write community name to be exposed, related to (1) "'read-only' community access," and/or (2) an easily guessable community name. |
| CVE-2002-1407 | High | 2003-04-11 | Not applicable | No public exploit | TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack. |
| CVE-2002-1406 | High | 2003-04-11 | Not applicable | No public exploit | Unknown vulnerability in passwd for VVOS HP-UX 11.04, with unknown impact, related to "Unexpected behavior." |
| CVE-2002-0690 | High | 2003-04-11 | No exploit published | No public exploit | Format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings. |
| CVE-2003-0179 | High | 2003-04-02 | Not applicable | No public exploit | Buffer overflow in the COM Object Control Handler for Lotus Domino 6.0.1 and earlier allows remote attackers to execute arbitrary code via multiple attack vectors, as demonstrated using the InitializeUsingNotesUserName method in the iNotes ActiveX control. |
| CVE-2003-0178 | High | 2003-04-02 | Not applicable | No public exploit | Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code via (1) the s_ViewName option in the PresetFields parameter for iNotes, (2) the Foldername option in the PresetFields parameter for iNotes, or (3) a long Host header, which is inserted into a long Location header and used during a redirect operation. |
| CVE-2003-0172 | High | 2003-04-02 | Not applicable | Working exploit published | Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument. |
| CVE-2003-0168 | High | 2003-04-02 | Not applicable | No public exploit | Buffer overflow in Apple QuickTime Player 5.x and 6.0 for Windows allows remote attackers to execute arbitrary code via a long QuickTime URL. |
| CVE-2003-0167 | High | 2003-04-02 | Not applicable | No public exploit | Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a specially crafted mail folder, a different vulnerability than CVE-2003-0140. |
| CVE-2003-0166 | High | 2003-04-02 | Not applicable | Working exploit published | Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions. |
| CVE-2003-0162 | High | 2003-04-02 | Not applicable | No public exploit | Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page. |
| CVE-2003-0161 | High | 2003-04-02 | Not applicable | Working exploit published | The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337. |
| CVE-2003-0159 | High | 2003-04-02 | Not applicable | No public exploit | Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code. |
| CVE-2003-0152 | High | 2003-04-02 | Not applicable | No public exploit | Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user. |
| CVE-2003-0106 | High | 2003-04-02 | Not applicable | No public exploit | The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded with escapes, Unicode, or UTF-8. |
| CVE-2003-0092 | High | 2003-04-02 | Not applicable | No public exploit | Heap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to gain root privileges via a long HOME environment variable. |
| CVE-2003-0091 | High | 2003-04-02 | Not applicable | No public exploit | Stack-based buffer overflow in the bsd_queue() function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege. |
| CVE-2002-1524 | High | 2003-04-02 | Not applicable | No public exploit | Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) with a long include file tag. |
| CVE-2002-1520 | High | 2003-04-02 | Not applicable | No public exploit | The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges. |
| CVE-2002-1519 | High | 2003-04-02 | Not applicable | No public exploit | Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter. |
| CVE-2002-1514 | High | 2003-04-02 | Not applicable | Working exploit published | gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file. |
| CVE-2002-1506 | High | 2003-04-02 | Not applicable | Working exploit published | Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflows an error string that is generated. |
| CVE-2002-1505 | High | 2003-04-02 | Not applicable | Working exploit published | SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers to modify the database and possibly gain privileges via the boardid parameter. |
| CVE-2002-1503 | High | 2003-04-02 | Not applicable | Working exploit published | Buffer overflow in Automatic File Distributor (AFD) 1.2.14 and earlier allows local users to gain privileges via a long MON_WORK_DIR environment variable or -w (workdir) argument to (1) afd, (2) afdcmd, (3) afd_ctrl, (4) init_afd, (5) mafd, (6) mon_ctrl, (7) show_olog, or (8) udc. |
| CVE-2002-1500 | High | 2003-04-02 | Not applicable | No public exploit | Buffer overflow in (1) mrinfo, (2) mtrace, and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables, which produces file descriptors larger than FD_SETSIZE, which are not checked by FD_SET(). |
| CVE-2002-1499 | High | 2003-04-02 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via (1) the authornumber parameter in author.asp, (2) the discussblurbid parameter in discuss.asp, (3) the name parameter in holdcomment.asp, and (4) the email parameter in holdcomment.asp. |
| CVE-2002-1496 | High | 2003-04-02 | Not applicable | Working exploit published | Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via a negative value in the Content-Length HTTP header. |
| CVE-2002-1492 | High | 2003-04-02 | Not applicable | Working exploit published | Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via (1) close_tunnel and (2) open_tunnel. |
| CVE-2002-1489 | High | 2003-04-02 | Not applicable | Working exploit published | Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long URL or (2) a request with a long method name. |