Overview 3,446 matches · 31 in Waratek scope · 2 protected · 35 exploited · 1 CISA KEV · 1,080 public PoC · 78 EPSS ≥ 0.5
3,446matches
31in Waratek scope0.9%
2protected0.1%
35exploited1.0%
1CISA KEV0.0%
1,080public PoC31.3%
78EPSS ≥ 0.52.3%
Protected by Waratek
2
0.1%
Rule in development
0
0.0%
Mitigation candidate
4
0.1%
No exploit published
25
0.7%
Outside Waratek scope
19
0.6%
Not applicable
3,396
98.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
2
0.1%
partly blocked
0
0.0%
not blocked
3,444
99.9%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
35
1.0%
Working exploit published
1,050
30.5%
Proof of concept only
0
0.0%
Forecast only
5
0.1%
No public exploit
2,356
68.4%
split by
peak 1,023 / year
19882
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
19892
Not applicable2
High2
not blocked2
No public exploit2
19908
Not applicable8
High8
not blocked8
No public exploit8
199111
Not applicable11
High11
not blocked11
Working exploit published2
No public exploit9
199212
Not applicable12
High12
not blocked12
No public exploit12
19938
Not applicable8
High8
not blocked8
No public exploit8
199414
Not applicable14
High14
not blocked14
Working exploit published3
No public exploit11
199517
Not applicable17
High17
not blocked17
Working exploit published2
No public exploit15
199643
No exploit published1
Not applicable42
High43
not blocked43
Working exploit published12
Forecast only1
No public exploit30
1997143
Not applicable143
High143
not blocked143
Exploited2
Working exploit published51
No public exploit90
1998137
Not applicable137
High137
not blocked137
Exploited1
Working exploit published33
No public exploit103
1999423
No exploit published2
Not applicable421
High423
not blocked423
Exploited2
Working exploit published132
No public exploit289
2000454
Mitigation candidate2
No exploit published3
Outside Waratek scope2
Not applicable447
High454
not blocked454
Exploited3
Working exploit published197
Forecast only1
No public exploit253
2001776
Protected by Waratek1
No exploit published6
Outside Waratek scope5
Not applicable764
High776
blocked by ARMR today1
not blocked775
Exploited11
Working exploit published219
No public exploit546
20021,023
Protected by Waratek1
Mitigation candidate2
No exploit published8
Outside Waratek scope8
Not applicable1,004
High1,023
blocked by ARMR today1
not blocked1,022
Exploited9
Working exploit published276
Forecast only3
No public exploit735
2003373
No exploit published5
Outside Waratek scope4
Not applicable364
High373
not blocked373
Exploited7
Working exploit published122
No public exploit244
19891991199319951997199920012003
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2003-0701 | High | 2003-08-27 | Not applicable | Working exploit published | Buffer overflow in Internet Explorer 6 SP1 for certain languages that support double-byte encodings (e.g., Japanese) allows remote attackers to execute arbitrary code via the Type property of an Object tag, a variant of CVE-2003-0344. |
| CVE-2003-0699 | High | 2003-08-27 | Not applicable | No public exploit | The C-Media PCI sound driver in Linux before 2.4.21 does not use the get_user function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0700. |
| CVE-2003-0685 | High | 2003-08-27 | Not applicable | No public exploit | Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response. |
| CVE-2003-0672 | High | 2003-08-27 | Not applicable | No public exploit | Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication, which is not properly handled when recording a log message. |
| CVE-2003-0671 | High | 2003-08-27 | Not applicable | No public exploit | Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via the device name argument, as demonstrated in Sustworks IPNetSentryX and IPNetMonitorX the setuid program RunTCPFlow. |
| CVE-2003-0657 | High | 2003-08-27 | Not applicable | No public exploit | Multiple SQL injection vulnerabilities in the infolog module for phpgroupware 0.9.14 and earlier could allow remote attackers to conduct unauthorized database actions. |
| CVE-2003-0655 | High | 2003-08-27 | Not applicable | Working exploit published | rscsi in cdrtools 2.01 and earlier allows local users to overwrite arbitrary files and gain root privileges by specifying the target file as a command line argument, which is modified while rscsi is running with privileges. |
| CVE-2003-0654 | High | 2003-08-27 | Not applicable | No public exploit | Buffer overflow in autorespond may allow remote attackers to execute arbitrary code as the autorespond user via qmail. |
| CVE-2003-0651 | High | 2003-08-27 | Not applicable | Working exploit published | Buffer overflow in the mylo_log logging function for mod_mylo 0.2.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. |
| CVE-2003-0650 | High | 2003-08-27 | Not applicable | No public exploit | Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. (dot dot) sequences in filenames in a .APK (Zip) file. |
| CVE-2003-0649 | High | 2003-08-27 | Not applicable | Working exploit published | Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long HOME environment variable. |
| CVE-2003-0647 | High | 2003-08-27 | Not applicable | Working exploit published | Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via an extremely long (2GB) HTTP GET request. |
| CVE-2003-0646 | High | 2003-08-27 | Not applicable | No public exploit | Multiple buffer overflows in ActiveX controls used by Trend Micro HouseCall 5.5 and 5.7, and Damage Cleanup Server 1.0, allow remote attackers to execute arbitrary code via long parameter strings. |
| CVE-2003-0640 | High | 2003-08-27 | Outside Waratek scope | No public exploit | BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to overwrite usernames and passwords, which may allow Operators to gain Admin privileges. |
| CVE-2003-0638 | High | 2003-08-27 | Not applicable | No public exploit | Multiple buffer overflows in Novell iChain 2.1 before Field Patch 3, and iChain 2.2 before Field Patch 1a, allow attackers to cause a denial of service (ABEND) and possibly execute arbitrary code via (1) a long user name or (2) an unknown attack related to a "special script against login." |
| CVE-2003-0636 | High | 2003-08-27 | Not applicable | No public exploit | Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect URLs to malicious web sites. |
| CVE-2003-0634 | High | 2003-08-27 | Not applicable | No public exploit | Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database users in some cases, to execute arbitrary code via a long library name. |
| CVE-2003-0632 | High | 2003-08-27 | Not applicable | No public exploit | Buffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI program (FNDWRR.exe) of Oracle E-Business Suite 11.0 and 11.5.1 through 11.5.8 may allow remote attackers to execute arbitrary code via a long URL. |
| CVE-2003-0631 | High | 2003-08-27 | Not applicable | No public exploit | VMware GSX Server 2.5.1 build 4968 and earlier, and Workstation 4.0 and earlier, allows local users to gain root privileges via certain enivronment variables that are used when launching a virtual machine session. |
| CVE-2003-0625 | High | 2003-08-27 | Not applicable | Working exploit published | Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the server's response. |
| CVE-2003-0616 | High | 2003-08-27 | No exploit published | No public exploit | Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution. |
| CVE-2003-0609 | High | 2003-08-27 | Not applicable | Working exploit published | Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long LD_PRELOAD environment variable. |
| CVE-2003-0605 | High | 2003-08-27 | Not applicable | Exploited | The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function. |
| CVE-2003-0604 | High | 2003-08-27 | Not applicable | No public exploit | Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File:// URL. |
| CVE-2003-0599 | High | 2003-08-27 | Not applicable | No public exploit | Unknown vulnerability in the Virtual File System (VFS) capability for phpGroupWare 0.9.16preRC and versions before 0.9.14.004 with unknown implications, related to the VFS path being under the web document root. |
| CVE-2003-0597 | High | 2003-08-27 | Not applicable | No public exploit | Unknown vulnerability in display of Merge before 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges. |
| CVE-2003-0595 | High | 2003-08-27 | Not applicable | Working exploit published | Buffer overflow in WiTango Application Server and Tango 2000 allows remote attackers to execute arbitrary code via a long cookie to Witango_UserReference. |
| CVE-2003-0575 | High | 2003-08-27 | Not applicable | No public exploit | Heap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUTH_UNIX gid list. |
| CVE-2003-0546 | High | 2003-08-27 | Not applicable | No public exploit | up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsigned packages to be installed from the Red Hat Network, if that network is compromised. |
| CVE-2003-0532 | High | 2003-08-27 | Not applicable | No public exploit | Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, which could allow remote attackers to execute arbitrary code via an object tag with a data parameter to a malicious file hosted on a server that returns an unsafe Content-Type, aka the "Object Type" vulnerability. |
| CVE-2003-0531 | High | 2003-08-27 | Not applicable | No public exploit | Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer domain using the browser cache via crafted Content-Type and Content-Disposition headers, aka the "Browser Cache Script Execution in My Computer Zone" vulnerability. |
| CVE-2003-0530 | High | 2003-08-27 | Not applicable | No public exploit | Buffer overflow in the BR549.DLL ActiveX control for Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to execute arbitrary code. |
| CVE-2003-0502 | High | 2003-08-27 | Not applicable | No public exploit | Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0421. |
| CVE-2003-0426 | High | 2003-08-27 | Not applicable | No public exploit | The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator. |
| CVE-2003-0421 | High | 2003-08-27 | Not applicable | No public exploit | Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0502. |
| CVE-2003-0353 | High | 2003-08-27 | Not applicable | No public exploit | Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434. |
| CVE-2003-0346 | High | 2003-08-27 | Not applicable | No public exploit | Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with (1) large length for a Text or Copyright string, or (2) a large number of tracks, which leads to a heap-based buffer overflow. |
| CVE-2003-0232 | High | 2003-08-27 | Not applicable | Working exploit published | Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow. |
| CVE-2003-0230 | High | 2003-08-27 | Not applicable | No public exploit | Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability. |
| CVE-2003-0149 | High | 2003-08-27 | Not applicable | No public exploit | Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters. |
| CVE-2003-0148 | High | 2003-08-27 | No exploit published | No public exploit | The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that (1) obtain the database administrator username and encrypted password in a configuration file from the ePO server using a certain request, (2) crack the password due to weak cryptography, and (3) use the password to pass commands through xp_cmdshell. |
| CVE-2003-1063 | High | 2003-08-20 | Not applicable | No public exploit | The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy. |
| CVE-2003-1202 | High | 2003-08-19 | Not applicable | No public exploit | The checklogin function in omail.pl for omail webmail 0.98.4 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) password, (2) domainname, or (3) username. |
| CVE-2003-0590 | High | 2003-08-18 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon (image_subject) field. |
| CVE-2003-0589 | High | 2003-08-18 | Not applicable | No public exploit | admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password. |
| CVE-2003-0588 | High | 2003-08-18 | Not applicable | No public exploit | admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password. |
| CVE-2003-0586 | High | 2003-08-18 | Not applicable | Working exploit published | Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php. |
| CVE-2003-0585 | High | 2003-08-18 | Not applicable | No public exploit | SQL injection vulnerability in login.asp of Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to bypass authentication and execute arbitrary SQL code via the (1) user or (2) pass parameters. |
| CVE-2003-0584 | High | 2003-08-18 | Not applicable | Working exploit published | Format string vulnerability in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument. |
| CVE-2003-0583 | High | 2003-08-18 | Not applicable | No public exploit | Buffer overflow in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via a long command line argument. |
| CVE-2003-0581 | High | 2003-08-18 | Not applicable | No public exploit | X Fontserver for Truetype fonts (xfstt) 1.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a (1) FS_QueryXExtents8 or (2) FS_QueryXBitmaps8 packet, and possibly other types of packets, with a large num_ranges value, which causes an out-of-bounds array access. |
| CVE-2003-0580 | High | 2003-08-18 | Not applicable | No public exploit | Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument. |
| CVE-2003-0578 | High | 2003-08-18 | Not applicable | No public exploit | cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users to gain privileges by deleting and overwriting arbitrary files. |
| CVE-2003-0577 | High | 2003-08-18 | Not applicable | No public exploit | mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size. |
| CVE-2003-0574 | High | 2003-08-18 | Not applicable | No public exploit | Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local users to cause a core dump in scheme and possibly gain privileges via certain environment variables, a different vulnerability than CVE-2001-0797 and CVE-1999-0028. |
| CVE-2003-0567 | High | 2003-08-18 | Not applicable | Working exploit published | Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full. |
| CVE-2003-0561 | High | 2003-08-18 | Not applicable | Working exploit published | Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP banner, or long responses to the client commands (2) USER, (3) PASS, (4) ACCT, and possibly other commands. |
| CVE-2003-0560 | High | 2003-08-18 | Not applicable | Working exploit published | SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the id parameter. |
| CVE-2003-0559 | High | 2003-08-18 | Not applicable | No public exploit | mainfile.php in phpforum 2 RC-1, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by modifying the MAIN_PATH parameter to reference a URL on a remote web server that contains the code. |
| CVE-2003-0558 | High | 2003-08-18 | Not applicable | Working exploit published | Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request. |
| CVE-2003-0557 | High | 2003-08-18 | Not applicable | Working exploit published | SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field. |
| CVE-2003-0555 | High | 2003-08-18 | Not applicable | No public exploit | ImageMagick 5.4.3.x and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a "%x" filename, possibly triggering a format string vulnerability. |
| CVE-2003-0553 | High | 2003-08-18 | Not applicable | No public exploit | Buffer overflow in the Client Detection Tool (CDT) plugin (npcdt.dll) for Netscape 7.02 allows remote attackers to execute arbitrary code via an attachment with a long filename. |
| CVE-2003-0538 | High | 2003-08-18 | Not applicable | No public exploit | The mailcap file for mozart 1.2.5 and earlier causes Oz applications to be passed to the Oz interpreter, which allows remote attackers to execute arbitrary Oz programs in a MIME-aware client program. |
| CVE-2003-0535 | High | 2003-08-18 | Not applicable | No public exploit | Buffer overflow in xbl 1.0k and earlier allows local users to gain privileges via a long -display command line option. |
| CVE-2003-0522 | High | 2003-08-18 | Not applicable | No public exploit | Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via the idadmin parameter to login.asp or (2) gain other privileges via the Email parameter to Custva.asp. |
| CVE-2003-0516 | High | 2003-08-18 | Not applicable | No public exploit | cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in (1) caller ID or (2) caller name strings. |
| CVE-2003-0515 | High | 2003-08-18 | Not applicable | No public exploit | SQL injection vulnerabilities in the (1) PostgreSQL or (2) MySQL authentication modules for teapop 0.3.5 and earlier allow attackers to execute arbitrary SQL and possibly gain privileges. |
| CVE-2003-0496 | High | 2003-08-18 | Not applicable | Working exploit published | Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file. |
| CVE-2003-0352 | High | 2003-08-18 | Not applicable | Exploited | Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms. |
| CVE-2003-0345 | High | 2003-08-18 | Not applicable | No public exploit | Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB packet that specifies a smaller buffer length than is required. |
| CVE-2003-0510 | High | 2003-08-07 | Not applicable | Working exploit published | Format string vulnerability in ezbounce 1.0 through 1.50 allows remote attackers to execute arbitrary code via the "sessions" command. |
| CVE-2003-0509 | High | 2003-08-07 | Not applicable | Working exploit published | SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp. |
| CVE-2003-0508 | High | 2003-08-07 | Not applicable | Working exploit published | Buffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader (acroread) 5.0.7 and earlier allows remote attackers to execute arbitrary code via a .pdf file with a long mailto link. |
| CVE-2003-0507 | High | 2003-08-07 | Not applicable | No public exploit | Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service (reboot) and possibly execute arbitrary code via an LDAP version 3 search request with a large number of (1) "AND," (2) "OR," and possibly other statements, which causes LSASS.EXE to crash. |
| CVE-2003-0503 | High | 2003-08-07 | Not applicable | No public exploit | Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service or execute arbitrary code via a long third argument. |
| CVE-2003-0500 | High | 2003-08-07 | Not applicable | Working exploit published | SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name. |
| CVE-2003-0498 | High | 2003-08-07 | Not applicable | No public exploit | Caché Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows local users to execute arbitrary code by adding server-side scripts that are executed with root privileges. |
| CVE-2003-0497 | High | 2003-08-07 | Not applicable | Working exploit published | Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs. |
| CVE-2003-0494 | High | 2003-08-07 | Not applicable | No public exploit | password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modified member id. |
| CVE-2003-0493 | High | 2003-08-07 | Not applicable | No public exploit | Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after obtaining a valid session ID. |
| CVE-2003-0491 | High | 2003-08-07 | Not applicable | No public exploit | The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file. |
| CVE-2003-0490 | High | 2003-08-07 | Not applicable | No public exploit | The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical directories and files with world-writable permissions, which allows local users to gain privileges as other users by replacing programs with malicious code. |
| CVE-2003-0489 | High | 2003-08-07 | Not applicable | No public exploit | tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute. |
| CVE-2003-0487 | High | 2003-08-07 | Not applicable | Working exploit published | Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parameter in the do_subscribe module, (2) a long folder parameter in the add_acl module, (3) a long folder parameter in the list module, and (4) a long user parameter in the do_map module. |
| CVE-2003-0482 | High | 2003-08-07 | Not applicable | Working exploit published | TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly accessing the uploaded code via a request to the repository containing the code. |
| CVE-2003-0478 | High | 2003-08-07 | Not applicable | Working exploit published | Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) methane 0.1.1, (4) AndromedeIRCd 1.2.3-Release, and (5) ircd-RU, when running in debug mode, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request containing format strings. |
| CVE-2003-0473 | High | 2003-08-07 | Not applicable | No public exploit | Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications. |
| CVE-2003-0471 | High | 2003-08-07 | Not applicable | Working exploit published | Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a long USER argument. |
| CVE-2003-0470 | High | 2003-08-07 | Not applicable | Working exploit published | Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings. |
| CVE-2003-0469 | High | 2003-08-07 | Not applicable | Working exploit published | Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align" argument in an HR tag. |
| CVE-2003-0454 | High | 2003-08-07 | Not applicable | Working exploit published | Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable. |
| CVE-2003-0453 | High | 2003-08-07 | Not applicable | No public exploit | traceroute-nanog 6.1.1 allows local users to overwrite unauthorized memory and possibly execute arbitrary code via certain "nprobes" and "max_ttl" arguments that cause an integer overflow that is used when allocating memory, which leads to a buffer overflow. |
| CVE-2003-0450 | High | 2003-08-07 | Not applicable | No public exploit | Cistron RADIUS daemon (radiusd-cistron) 1.6.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large value in an NAS-Port attribute, which is interpreted as a negative number and causes a buffer overflow. |
| CVE-2003-0445 | High | 2003-07-24 | Not applicable | No public exploit | Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a long Request-URI. |
| CVE-2003-0437 | High | 2003-07-24 | Not applicable | Working exploit published | Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt parameter. |
| CVE-2003-0436 | High | 2003-07-24 | Not applicable | Working exploit published | Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul parameter. |
| CVE-2003-0435 | High | 2003-07-24 | Not applicable | No public exploit | Buffer overflow in net_swapscore for typespeed 0.4.1 and earlier allows remote attackers to execute arbitrary code. |
| CVE-2003-0434 | High | 2003-07-24 | Not applicable | Working exploit published | Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink. |
| CVE-2003-0433 | High | 2003-07-24 | Not applicable | No public exploit | Multiple buffer overflows in gnocatan 0.6.1 and earlier allow attackers to execute arbitrary code. |