Overview 3,518 matches · 31 in Waratek scope · 2 protected · 37 exploited · 1 CISA KEV · 1,111 public PoC · 83 EPSS ≥ 0.5
3,518matches
31in Waratek scope0.9%
2protected0.1%
37exploited1.1%
1CISA KEV0.0%
1,111public PoC31.6%
83EPSS ≥ 0.52.4%
Protected by Waratek
2
0.1%
Rule in development
0
0.0%
Mitigation candidate
4
0.1%
No exploit published
25
0.7%
Outside Waratek scope
19
0.5%
Not applicable
3,468
98.6%
Withdrawn CVE
0
0.0%
blocked by ARMR today
2
0.1%
partly blocked
0
0.0%
not blocked
3,516
99.9%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
37
1.1%
Working exploit published
1,080
30.7%
Proof of concept only
0
0.0%
Forecast only
5
0.1%
No public exploit
2,396
68.1%
split by
peak 1,023 / year
19882
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
19892
Not applicable2
High2
not blocked2
No public exploit2
19908
Not applicable8
High8
not blocked8
No public exploit8
199111
Not applicable11
High11
not blocked11
Working exploit published2
No public exploit9
199212
Not applicable12
High12
not blocked12
No public exploit12
19938
Not applicable8
High8
not blocked8
No public exploit8
199414
Not applicable14
High14
not blocked14
Working exploit published3
No public exploit11
199517
Not applicable17
High17
not blocked17
Working exploit published2
No public exploit15
199643
No exploit published1
Not applicable42
High43
not blocked43
Working exploit published12
Forecast only1
No public exploit30
1997143
Not applicable143
High143
not blocked143
Exploited2
Working exploit published51
No public exploit90
1998137
Not applicable137
High137
not blocked137
Exploited1
Working exploit published33
No public exploit103
1999423
No exploit published2
Not applicable421
High423
not blocked423
Exploited2
Working exploit published132
No public exploit289
2000454
Mitigation candidate2
No exploit published3
Outside Waratek scope2
Not applicable447
High454
not blocked454
Exploited3
Working exploit published197
Forecast only1
No public exploit253
2001776
Protected by Waratek1
No exploit published6
Outside Waratek scope5
Not applicable764
High776
blocked by ARMR today1
not blocked775
Exploited11
Working exploit published219
No public exploit546
20021,023
Protected by Waratek1
Mitigation candidate2
No exploit published8
Outside Waratek scope8
Not applicable1,004
High1,023
blocked by ARMR today1
not blocked1,022
Exploited9
Working exploit published276
Forecast only3
No public exploit735
2003445
No exploit published5
Outside Waratek scope4
Not applicable436
High445
not blocked445
Exploited9
Working exploit published152
No public exploit284
19891991199319951997199920012003
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2003-1160 | High | 2003-10-30 | Not applicable | Working exploit published | FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges via an HTTP request to aindex.htm that contains double leading slashes (//). |
| CVE-2003-1143 | High | 2003-10-30 | Not applicable | Working exploit published | Croteam Serious Sam demo test 2 2.1a, Serious Sam: the First Encounter 1.05, and Serious Sam: the Second Encounter 1.05 allow remote attackers to cause a denial of service (crash or freeze) via a TCP packet with an invalid first parameter. |
| CVE-2003-1186 | High | 2003-10-29 | Not applicable | No public exploit | Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to execute arbitrary code via a long HTTP Referer header. |
| CVE-2003-1150 | High | 2003-10-27 | Not applicable | No public exploit | Buffer overflow in the portmapper service (PMAP.NLM) in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors. |
| CVE-2003-1140 | High | 2003-10-27 | Not applicable | Working exploit published | Buffer overflow in Musicqueue 1.2.0 allows local users to execute arbitrary code via a long language variable in the configuration file. |
| CVE-2003-1148 | High | 2003-10-25 | Not applicable | Working exploit published | Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allow remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter to (1) config.inc.php or (2) new-visitor.inc.php in common/visiteurs/include/. |
| CVE-2003-0755 | High | 2003-10-20 | Not applicable | Working exploit published | Buffer overflow in sys_cmd.c for gtkftpd 1.0.4 and earlier allows remote attackers to execute arbitrary code by creating long directory names and listing them with a LIST command. |
| CVE-2003-0754 | High | 2003-10-20 | Not applicable | No public exploit | nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is used for authentication. |
| CVE-2003-0752 | High | 2003-10-20 | Not applicable | Working exploit published | SQL injection vulnerability in global.php3 of AttilaPHP 3.0, and possibly earlier versions, allows remote attackers to bypass authentication via a modified cook_id parameter. |
| CVE-2003-0751 | High | 2003-10-20 | Not applicable | No public exploit | SQL injection vulnerability in pass_done.php for PY-Membres 4.2 and earlier allows remote attackers to execute arbitrary SQL queries via the email parameter. |
| CVE-2003-0750 | High | 2003-10-20 | Not applicable | No public exploit | secure.php in PY-Membres 4.2 and earlier allows remote attackers to bypass authentication by setting the adminpy parameter. |
| CVE-2003-0745 | High | 2003-10-20 | Not applicable | No public exploit | SNMPc 6.0.8 and earlier performs authentication to the server on the client side, which allows remote attackers to gain privileges by decrypting the password that is returned by the server. |
| CVE-2003-0743 | High | 2003-10-20 | Not applicable | No public exploit | Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed before the "(no argument given)" string is appended to the buffer. |
| CVE-2003-0738 | High | 2003-10-20 | Not applicable | No public exploit | The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to cause a denial of service (crash) via a long year parameter. |
| CVE-2003-0735 | High | 2003-10-20 | Not applicable | Working exploit published | SQL injection vulnerability in the Calendar module of phpWebSite 0.9.x and earlier allows remote attackers to execute arbitrary SQL queries, as demonstrated using the year parameter. |
| CVE-2003-0734 | High | 2003-10-20 | Not applicable | No public exploit | Unknown vulnerability in the pam_filter mechanism in pam_ldap before version 162, when LDAP based authentication is being used, allows users to bypass host-based access restrictions and log onto the system. |
| CVE-2003-0732 | High | 2003-10-20 | Not applicable | No public exploit | CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages. |
| CVE-2003-0731 | High | 2003-10-20 | Not applicable | No public exploit | CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter. |
| CVE-2003-0730 | High | 2003-10-20 | Not applicable | No public exploit | Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflow attacks. |
| CVE-2003-0729 | High | 2003-10-20 | Not applicable | Working exploit published | Buffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a TFTP request with a long filename. |
| CVE-2003-0725 | High | 2003-10-20 | Not applicable | Working exploit published | Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code. |
| CVE-2003-0724 | High | 2003-10-20 | Not applicable | No public exploit | ssh on HP Tru64 UNIX 5.1B and 5.1A does not properly handle RSA signatures when digital certificates and RSA keys are used, which could allow local and remote attackers to gain privileges. |
| CVE-2003-0723 | High | 2003-10-20 | Not applicable | Working exploit published | Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code. |
| CVE-2003-0709 | High | 2003-10-20 | Not applicable | No public exploit | Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option. |
| CVE-2003-0708 | High | 2003-10-20 | Not applicable | No public exploit | Format string vulnerability in LinuxNode (node) before 0.3.2 may allow attackers to cause a denial of service or execute arbitrary code. |
| CVE-2003-0707 | High | 2003-10-20 | Not applicable | No public exploit | Buffer overflow in LinuxNode (node) before 0.3.2 allows remote attackers to execute arbitrary code. |
| CVE-2003-0689 | High | 2003-10-20 | Not applicable | No public exploit | The getgrouplist function in GNU libc (glibc) 2.2.4 and earlier allows attackers to cause a denial of service (segmentation fault) and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow. |
| CVE-2003-0686 | High | 2003-10-20 | Not applicable | Working exploit published | Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code. |
| CVE-2003-0666 | High | 2003-10-20 | Not applicable | Working exploit published | Buffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary code via modified data offset and data size parameters in a Corel WordPerfect file. |
| CVE-2003-0665 | High | 2003-10-20 | Not applicable | Working exploit published | Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control. |
| CVE-2003-0664 | High | 2003-10-20 | Not applicable | No public exploit | Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document. |
| CVE-2003-0630 | High | 2003-10-20 | Not applicable | No public exploit | Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator (atari800) before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrated with the -osa_rom argument. |
| CVE-2003-0347 | High | 2003-10-20 | Not applicable | Working exploit published | Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter. |
| CVE-2003-0826 | High | 2003-10-06 | Not applicable | Working exploit published | lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack. |
| CVE-2003-0805 | High | 2003-10-06 | Not applicable | Working exploit published | Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command, and (2) the GSisText function, which calculates the view-type. |
| CVE-2003-0803 | High | 2003-10-06 | Not applicable | Working exploit published | Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user. |
| CVE-2003-0785 | High | 2003-10-06 | Not applicable | No public exploit | ipmasq before 3.5.12, in certain configurations, may forward packets to the external interface even if the packets are not associated with an established connection, which could allow remote attackers to bypass intended filtering. |
| CVE-2003-0784 | High | 2003-10-06 | Not applicable | No public exploit | Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that contains format string specifiers. |
| CVE-2003-0783 | High | 2003-10-06 | Not applicable | Working exploit published | Multiple buffer overflows in hztty 2.0 allow local users to gain root privileges. |
| CVE-2003-0759 | High | 2003-10-06 | Not applicable | Working exploit published | Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privileges via a long command line argument. |
| CVE-2003-0758 | High | 2003-10-06 | Not applicable | Working exploit published | Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users to gain root privileges via a long command line argument. |
| CVE-2003-0742 | High | 2003-10-06 | Not applicable | No public exploit | SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to run as if it were called from ncsa_httpd, then modifying the PATH environment variable to point to a malicious "hostname" program. |
| CVE-2003-0697 | High | 2003-10-06 | Not applicable | No public exploit | Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows local users to cause a denial of service (crash) or gain root privileges. |
| CVE-2003-0695 | High | 2003-10-06 | Not applicable | No public exploit | Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffer_free in buffer.c, or (3) a separate function in channels.c, a different vulnerability than CVE-2003-0693. |
| CVE-2003-0694 | High | 2003-10-06 | Not applicable | Exploited | The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c. |
| CVE-2003-0692 | High | 2003-10-06 | Not applicable | No public exploit | KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session. |
| CVE-2003-0690 | High | 2003-10-06 | Not applicable | No public exploit | KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module. |
| CVE-2003-0682 | High | 2003-10-06 | Not applicable | No public exploit | "Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695. |
| CVE-2003-0681 | High | 2003-10-06 | Not applicable | Exploited | A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences. |
| CVE-2003-0680 | High | 2003-10-06 | Not applicable | No public exploit | Unknown vulnerability in NFS for SGI IRIX 6.5.21 and earlier may allow an NFS client to bypass read-only restrictions. |
| CVE-2003-0780 | High | 2003-09-22 | Not applicable | Working exploit published | Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field. |
| CVE-2003-0779 | High | 2003-09-22 | Not applicable | No public exploit | SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string. |
| CVE-2003-0776 | High | 2003-09-22 | Not applicable | No public exploit | saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences. |
| CVE-2003-0774 | High | 2003-09-22 | Not applicable | No public exploit | saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service (segmentation fault) when invalid memory is accessed. |
| CVE-2003-0773 | High | 2003-09-22 | Not applicable | No public exploit | saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf. |
| CVE-2003-0772 | High | 2003-09-22 | Not applicable | Working exploit published | Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments. |
| CVE-2003-0770 | High | 2003-09-22 | Not applicable | Working exploit published | FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement. |
| CVE-2003-0722 | High | 2003-09-22 | Not applicable | Working exploit published | The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets. |
| CVE-2003-0693 | High | 2003-09-22 | Not applicable | No public exploit | A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695. |
| CVE-2003-0767 | High | 2003-09-17 | Not applicable | Working exploit published | Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and 0.27 and earlier for Linux and BSD, allows remote attackers to cause a denial of service and execute arbitrary code via a client request with a large length value. |
| CVE-2003-0766 | High | 2003-09-17 | Not applicable | Working exploit published | Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious servers to execute arbitrary code via (1) a long FTP banner, (2) a long response to a USER command, or (3) a long response to a PASS command. |
| CVE-2003-0765 | High | 2003-09-17 | Not applicable | Working exploit published | The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value. |
| CVE-2003-0762 | High | 2003-09-17 | Not applicable | Working exploit published | Buffer overflow in (1) foxweb.dll and (2) foxweb.exe of Foxweb 2.5 allows remote attackers to execute arbitrary code via a long URL (PATH_INFO value). |
| CVE-2003-0761 | High | 2003-09-17 | Not applicable | No public exploit | Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP) protocol implementation for Asterisk releases before August 15, 2003, allows remote attackers to execute arbitrary code via certain (1) MESSAGE or (2) INFO requests. |
| CVE-2003-0721 | High | 2003-09-17 | Not applicable | No public exploit | Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array access using a negative number. |
| CVE-2003-0720 | High | 2003-09-17 | Not applicable | Working exploit published | Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type. |
| CVE-2003-0715 | High | 2003-09-17 | Not applicable | No public exploit | Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0528. |
| CVE-2003-0705 | High | 2003-09-17 | Not applicable | Working exploit published | Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code. |
| CVE-2003-0704 | High | 2003-09-17 | Not applicable | No public exploit | KisMAC before 0.05d trusts user-supplied variables when chown'ing files or directories, which allows local users to gain privileges via the $DRIVER_KEXT environment variable in (1) viha_driver.sh, (2) macjack_load.sh, (3) airojack_load.sh, (4) setuid_enable.sh, (5) setuid_disable.sh, and using a "similar technique" for (6) viha_prep.sh and (7) viha_unprep.sh. |
| CVE-2003-0703 | High | 2003-09-17 | Not applicable | No public exploit | KisMAC before 0.05d trusts user-supplied variables to load arbitrary kernels or kernel modules, which allows local users to gain privileges via the $DRIVER_KEXT environment variable as used in (1) viha_driver.sh, (2) macjack_load.sh, or (3) airojack_load.sh, or (4) via "similar techniques" using exchangeKernel.sh. |
| CVE-2003-0528 | High | 2003-09-17 | Not applicable | No public exploit | Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0715. |
| CVE-2003-1081 | High | 2003-09-09 | Not applicable | No public exploit | Aspppls for Solaris 8 allows local users to overwrite arbitrary files via a symlink attack on the .asppp.fifo temporary file. |
| CVE-2003-0701 | High | 2003-08-27 | Not applicable | Working exploit published | Buffer overflow in Internet Explorer 6 SP1 for certain languages that support double-byte encodings (e.g., Japanese) allows remote attackers to execute arbitrary code via the Type property of an Object tag, a variant of CVE-2003-0344. |
| CVE-2003-0699 | High | 2003-08-27 | Not applicable | No public exploit | The C-Media PCI sound driver in Linux before 2.4.21 does not use the get_user function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0700. |
| CVE-2003-0685 | High | 2003-08-27 | Not applicable | No public exploit | Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response. |
| CVE-2003-0672 | High | 2003-08-27 | Not applicable | No public exploit | Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication, which is not properly handled when recording a log message. |
| CVE-2003-0671 | High | 2003-08-27 | Not applicable | No public exploit | Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via the device name argument, as demonstrated in Sustworks IPNetSentryX and IPNetMonitorX the setuid program RunTCPFlow. |
| CVE-2003-0657 | High | 2003-08-27 | Not applicable | No public exploit | Multiple SQL injection vulnerabilities in the infolog module for phpgroupware 0.9.14 and earlier could allow remote attackers to conduct unauthorized database actions. |
| CVE-2003-0655 | High | 2003-08-27 | Not applicable | Working exploit published | rscsi in cdrtools 2.01 and earlier allows local users to overwrite arbitrary files and gain root privileges by specifying the target file as a command line argument, which is modified while rscsi is running with privileges. |
| CVE-2003-0654 | High | 2003-08-27 | Not applicable | No public exploit | Buffer overflow in autorespond may allow remote attackers to execute arbitrary code as the autorespond user via qmail. |
| CVE-2003-0651 | High | 2003-08-27 | Not applicable | Working exploit published | Buffer overflow in the mylo_log logging function for mod_mylo 0.2.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. |
| CVE-2003-0650 | High | 2003-08-27 | Not applicable | No public exploit | Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. (dot dot) sequences in filenames in a .APK (Zip) file. |
| CVE-2003-0649 | High | 2003-08-27 | Not applicable | Working exploit published | Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long HOME environment variable. |
| CVE-2003-0647 | High | 2003-08-27 | Not applicable | Working exploit published | Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via an extremely long (2GB) HTTP GET request. |
| CVE-2003-0646 | High | 2003-08-27 | Not applicable | No public exploit | Multiple buffer overflows in ActiveX controls used by Trend Micro HouseCall 5.5 and 5.7, and Damage Cleanup Server 1.0, allow remote attackers to execute arbitrary code via long parameter strings. |
| CVE-2003-0640 | High | 2003-08-27 | Outside Waratek scope | No public exploit | BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to overwrite usernames and passwords, which may allow Operators to gain Admin privileges. |
| CVE-2003-0638 | High | 2003-08-27 | Not applicable | No public exploit | Multiple buffer overflows in Novell iChain 2.1 before Field Patch 3, and iChain 2.2 before Field Patch 1a, allow attackers to cause a denial of service (ABEND) and possibly execute arbitrary code via (1) a long user name or (2) an unknown attack related to a "special script against login." |
| CVE-2003-0636 | High | 2003-08-27 | Not applicable | No public exploit | Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect URLs to malicious web sites. |
| CVE-2003-0634 | High | 2003-08-27 | Not applicable | No public exploit | Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database users in some cases, to execute arbitrary code via a long library name. |
| CVE-2003-0632 | High | 2003-08-27 | Not applicable | No public exploit | Buffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI program (FNDWRR.exe) of Oracle E-Business Suite 11.0 and 11.5.1 through 11.5.8 may allow remote attackers to execute arbitrary code via a long URL. |
| CVE-2003-0631 | High | 2003-08-27 | Not applicable | No public exploit | VMware GSX Server 2.5.1 build 4968 and earlier, and Workstation 4.0 and earlier, allows local users to gain root privileges via certain enivronment variables that are used when launching a virtual machine session. |
| CVE-2003-0625 | High | 2003-08-27 | Not applicable | Working exploit published | Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the server's response. |
| CVE-2003-0616 | High | 2003-08-27 | No exploit published | No public exploit | Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution. |
| CVE-2003-0609 | High | 2003-08-27 | Not applicable | Working exploit published | Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long LD_PRELOAD environment variable. |
| CVE-2003-0605 | High | 2003-08-27 | Not applicable | Exploited | The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function. |
| CVE-2003-0604 | High | 2003-08-27 | Not applicable | No public exploit | Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File:// URL. |
| CVE-2003-0599 | High | 2003-08-27 | Not applicable | No public exploit | Unknown vulnerability in the Virtual File System (VFS) capability for phpGroupWare 0.9.16preRC and versions before 0.9.14.004 with unknown implications, related to the VFS path being under the web document root. |
| CVE-2003-0597 | High | 2003-08-27 | Not applicable | No public exploit | Unknown vulnerability in display of Merge before 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges. |
| CVE-2003-0595 | High | 2003-08-27 | Not applicable | Working exploit published | Buffer overflow in WiTango Application Server and Tango 2000 allows remote attackers to execute arbitrary code via a long cookie to Witango_UserReference. |
| CVE-2003-0575 | High | 2003-08-27 | Not applicable | No public exploit | Heap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUTH_UNIX gid list. |