Overview 7,237 matches · 0 in Waratek scope · 0 protected · 45 exploited · 1 CISA KEV · 2,183 public PoC · 119 EPSS ≥ 0.5
7,237matches
0in Waratek scope0.0%
0protected0.0%
45exploited0.6%
1CISA KEV0.0%
2,183public PoC30.2%
119EPSS ≥ 0.51.6%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
7,237
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
7,237
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
45
0.6%
Working exploit published
2,151
29.7%
Proof of concept only
0
0.0%
Forecast only
12
0.2%
No public exploit
5,029
69.5%
split by
peak 2,107 / year
19882
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
19893
Not applicable3
High2
Medium1
not blocked3
No public exploit3
199011
Not applicable11
High8
Medium2
Low1
not blocked11
Working exploit published1
No public exploit10
199115
Not applicable15
High11
Medium4
not blocked15
Working exploit published2
No public exploit13
199213
Not applicable13
High12
Low1
not blocked13
No public exploit13
199313
Not applicable13
High8
Medium3
Low2
not blocked13
No public exploit13
199425
Not applicable25
High14
Medium10
Low1
not blocked25
Working exploit published6
No public exploit19
199525
Not applicable25
Critical1
High17
Medium6
Low1
not blocked25
Working exploit published5
No public exploit20
199673
Not applicable73
Critical1
High42
Medium21
Low9
not blocked73
Working exploit published17
Forecast only1
No public exploit55
1997252
Not applicable252
Critical1
High143
Medium89
Low19
not blocked252
Exploited2
Working exploit published73
Forecast only2
No public exploit175
1998246
Not applicable246
Critical1
High137
Medium85
Low23
not blocked246
Exploited1
Working exploit published50
No public exploit195
1999891
Not applicable891
Critical3
High421
Medium356
Low111
not blocked891
Exploited2
Working exploit published280
No public exploit609
20001,005
Not applicable1,005
Critical2
High447
Medium460
Low96
not blocked1,005
Exploited5
Working exploit published420
No public exploit580
20011,649
Not applicable1,649
Critical12
High764
Medium693
Low180
not blocked1,649
Exploited14
Working exploit published474
Forecast only2
No public exploit1,159
20022,107
Not applicable2,107
Critical10
High1,004
Medium953
Low140
not blocked2,107
Exploited12
Working exploit published531
Forecast only7
No public exploit1,557
2003907
Not applicable907
Critical6
High436
Medium414
Low51
not blocked907
Exploited9
Working exploit published291
No public exploit607
19891991199319951997199920012003
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2003-1159 | Medium | 2003-10-31 | Not applicable | No public exploit | Plug and Play Web Server Proxy 1.0002c allows remote attackers to cause a denial of service (server crash) via an invalid URI in an HTTP GET request to TCP port 8080. |
| CVE-2003-1197 | Medium | 2003-10-30 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in index.php for Ledscripts.com LedForums Beta 1 allows remote attackers to inject arbitrary web script or HTML via the (1) top_message parameter or (2) topic field of a new thread. |
| CVE-2003-1194 | Medium | 2003-10-30 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Booby .1 through 0.2.3 allows remote attackers to inject arbitrary web script or HTML via the error message. |
| CVE-2003-1160 | High | 2003-10-30 | Not applicable | Working exploit published | FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges via an HTTP request to aindex.htm that contains double leading slashes (//). |
| CVE-2003-1143 | High | 2003-10-30 | Not applicable | Working exploit published | Croteam Serious Sam demo test 2 2.1a, Serious Sam: the First Encounter 1.05, and Serious Sam: the Second Encounter 1.05 allow remote attackers to cause a denial of service (crash or freeze) via a TCP packet with an invalid first parameter. |
| CVE-2003-1191 | Medium | 2003-10-29 | Not applicable | Working exploit published | chatbox.php in e107 0.554 and 0.603 allows remote attackers to cause a denial of service (pages fail to load) via HTML in the Name field, which prevents the main.php form from being loaded. |
| CVE-2003-1189 | Medium | 2003-10-29 | Not applicable | No public exploit | Unknown vulnerability in Nokia IPSO 3.7, configured as IP Clusters, allows remote attackers to cause a denial of service via unknown attack vectors. |
| CVE-2003-1186 | High | 2003-10-29 | Not applicable | No public exploit | Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to execute arbitrary code via a long HTTP Referer header. |
| CVE-2003-1183 | Medium | 2003-10-28 | Not applicable | No public exploit | The WebCache component in Oracle Files 9.0.3.1.0, 9.0.3.2.0, and 9.0.3.3.0 of Oracle Collaboration Suite Release 1 caches files despite the cacheability rules imposed by Oracle Files, which allows local users to gain access. |
| CVE-2003-1151 | Medium | 2003-10-28 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in Fastream NETFile Server 6.0.3.588 allows remote attackers to inject arbitrary web script or HTML via the URL, which is displayed on a "404 Not Found" error page. |
| CVE-2003-1150 | High | 2003-10-27 | Not applicable | No public exploit | Buffer overflow in the portmapper service (PMAP.NLM) in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors. |
| CVE-2003-1149 | Medium | 2003-10-27 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked site, which is displayed on the blocked sites error page. |
| CVE-2003-1140 | High | 2003-10-27 | Not applicable | Working exploit published | Buffer overflow in Musicqueue 1.2.0 allows local users to execute arbitrary code via a long language variable in the configuration file. |
| CVE-2003-1139 | Medium | 2003-10-27 | Not applicable | Working exploit published | Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file. |
| CVE-2003-1138 | Medium | 2003-10-27 | Not applicable | Working exploit published | The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash (//). |
| CVE-2003-1137 | Medium | 2003-10-27 | Not applicable | Working exploit published | Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that contains an asterisk (*) wildcard character. |
| CVE-2003-1060 | Medium | 2003-10-27 | Not applicable | No public exploit | The NFS Server for Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (UFS panic) via certain invalid UFS requests, which triggers a null dereference. |
| CVE-2003-1181 | Medium | 2003-10-25 | Not applicable | Working exploit published | Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request to info.php, which invokes the phpinfo() function. |
| CVE-2003-1148 | High | 2003-10-25 | Not applicable | Working exploit published | Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allow remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter to (1) config.inc.php or (2) new-visitor.inc.php in common/visiteurs/include/. |
| CVE-2003-1136 | Medium | 2003-10-23 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in Chi Kien Uong Guestbook 1.51 allows remote attackers to inject arbitrary web script or HTML via (1) HTML in a posted message or (2) Javascript in an onmouseover attribute in an e-mail address or URL. |
| CVE-2003-0757 | Medium | 2003-10-20 | Not applicable | Working exploit published | Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemote requests to TCP ports 256 or 264, which leaks the IP addresses in a reply packet. |
| CVE-2003-0756 | Medium | 2003-10-20 | Not applicable | No public exploit | Directory traversal vulnerability in sitebuilder.cgi in SiteBuilder 1.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the selectedpage parameter. |
| CVE-2003-0755 | High | 2003-10-20 | Not applicable | Working exploit published | Buffer overflow in sys_cmd.c for gtkftpd 1.0.4 and earlier allows remote attackers to execute arbitrary code by creating long directory names and listing them with a LIST command. |
| CVE-2003-0754 | High | 2003-10-20 | Not applicable | No public exploit | nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is used for authentication. |
| CVE-2003-0753 | Medium | 2003-10-20 | Not applicable | No public exploit | nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphp_config[LangFile] parameter. |
| CVE-2003-0752 | High | 2003-10-20 | Not applicable | Working exploit published | SQL injection vulnerability in global.php3 of AttilaPHP 3.0, and possibly earlier versions, allows remote attackers to bypass authentication via a modified cook_id parameter. |
| CVE-2003-0751 | High | 2003-10-20 | Not applicable | No public exploit | SQL injection vulnerability in pass_done.php for PY-Membres 4.2 and earlier allows remote attackers to execute arbitrary SQL queries via the email parameter. |
| CVE-2003-0750 | High | 2003-10-20 | Not applicable | No public exploit | secure.php in PY-Membres 4.2 and earlier allows remote attackers to bypass authentication by setting the adminpy parameter. |
| CVE-2003-0749 | Medium | 2003-10-20 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal cookies via the ~service parameter. |
| CVE-2003-0748 | Medium | 2003-10-20 | Not applicable | Working exploit published | Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the ~theme parameter and a ~template parameter with a filename followed by space characters, which can prevent SAP from effectively adding a .html extension to the filename. |
| CVE-2003-0747 | Medium | 2003-10-20 | Not applicable | Working exploit published | wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters (1) ~service, (2) ~templatelanguage, (3) ~language, (4) ~theme, or (5) ~template, which leaks the information in the resulting error message. |
| CVE-2003-0746 | Medium | 2003-10-20 | Not applicable | No public exploit | Various Distributed Computing Environment (DCE) implementations, including HP OpenView, allow remote attackers to cause a denial of service (process hang or termination) via certain malformed inputs, as triggered by attempted exploits against the vulnerabilities CVE-2003-0352 or CVE-2003-0605, such as the Blaster/MSblast/LovSAN worm. |
| CVE-2003-0745 | High | 2003-10-20 | Not applicable | No public exploit | SNMPc 6.0.8 and earlier performs authentication to the server on the client side, which allows remote attackers to gain privileges by decrypting the password that is returned by the server. |
| CVE-2003-0744 | Medium | 2003-10-20 | Not applicable | No public exploit | The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service (process hang and termination) via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input. |
| CVE-2003-0743 | High | 2003-10-20 | Not applicable | No public exploit | Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed before the "(no argument given)" string is appended to the buffer. |
| CVE-2003-0740 | Medium | 2003-10-20 | Not applicable | Working exploit published | Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users to hijack the Stunnel server. |
| CVE-2003-0739 | Medium | 2003-10-20 | Not applicable | No public exploit | VMware Workstation 4.0.1 for Linux, build 5289 and earlier, allows local users to delete arbitrary files via a symlink attack. |
| CVE-2003-0738 | High | 2003-10-20 | Not applicable | No public exploit | The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to cause a denial of service (crash) via a long year parameter. |
| CVE-2003-0737 | Medium | 2003-10-20 | Not applicable | No public exploit | The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to obtain the full pathname of phpWebSite via an invalid year, which generates an error from localtime() in TimeZone.php of the Pear library. |
| CVE-2003-0736 | Medium | 2003-10-20 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script via (1) the day parameter in the calendar module, (2) the fatcat_id parameter in the fatcat module, (3) the PAGE_id parameter in the pagemaster module, (4) the PDA_limit parameter in the search, and (5) possibly other parameters in the calendar, fatcat, and pagemaster modules. |
| CVE-2003-0735 | High | 2003-10-20 | Not applicable | Working exploit published | SQL injection vulnerability in the Calendar module of phpWebSite 0.9.x and earlier allows remote attackers to execute arbitrary SQL queries, as demonstrated using the year parameter. |
| CVE-2003-0734 | High | 2003-10-20 | Not applicable | No public exploit | Unknown vulnerability in the pam_filter mechanism in pam_ldap before version 162, when LDAP based authentication is being used, allows users to bypass host-based access restrictions and log onto the system. |
| CVE-2003-0732 | High | 2003-10-20 | Not applicable | No public exploit | CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages. |
| CVE-2003-0731 | High | 2003-10-20 | Not applicable | No public exploit | CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter. |
| CVE-2003-0730 | High | 2003-10-20 | Not applicable | No public exploit | Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflow attacks. |
| CVE-2003-0729 | High | 2003-10-20 | Not applicable | Working exploit published | Buffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a TFTP request with a long filename. |
| CVE-2003-0728 | Medium | 2003-10-20 | Not applicable | No public exploit | Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL. |
| CVE-2003-0726 | Medium | 2003-10-20 | Not applicable | Working exploit published | RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is executed in the security context of the previously loaded URL, as demonstrated using a "javascript:" URL in the area tag. |
| CVE-2003-0725 | High | 2003-10-20 | Not applicable | Working exploit published | Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows remote attackers to execute arbitrary code. |
| CVE-2003-0724 | High | 2003-10-20 | Not applicable | No public exploit | ssh on HP Tru64 UNIX 5.1B and 5.1A does not properly handle RSA signatures when digital certificates and RSA keys are used, which could allow local and remote attackers to gain privileges. |
| CVE-2003-0723 | High | 2003-10-20 | Not applicable | Working exploit published | Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code. |
| CVE-2003-0709 | High | 2003-10-20 | Not applicable | No public exploit | Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option. |
| CVE-2003-0708 | High | 2003-10-20 | Not applicable | No public exploit | Format string vulnerability in LinuxNode (node) before 0.3.2 may allow attackers to cause a denial of service or execute arbitrary code. |
| CVE-2003-0707 | High | 2003-10-20 | Not applicable | No public exploit | Buffer overflow in LinuxNode (node) before 0.3.2 allows remote attackers to execute arbitrary code. |
| CVE-2003-0702 | Medium | 2003-10-20 | Not applicable | No public exploit | Unknown vulnerability in an ISAPI plugin for ISS Server Sensor 7.0 XPU 20.16, 20.18, and possibly other versions before 20.19, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code in Internet Information Server (IIS) via a certain URL through SSL. |
| CVE-2003-0689 | High | 2003-10-20 | Not applicable | No public exploit | The getgrouplist function in GNU libc (glibc) 2.2.4 and earlier allows attackers to cause a denial of service (segmentation fault) and execute arbitrary code when a user is a member of a large number of groups, which can cause a buffer overflow. |
| CVE-2003-0688 | Medium | 2003-10-20 | Not applicable | No public exploit | The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data. |
| CVE-2003-0686 | High | 2003-10-20 | Not applicable | Working exploit published | Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code. |
| CVE-2003-0666 | High | 2003-10-20 | Not applicable | Working exploit published | Buffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary code via modified data offset and data size parameters in a Corel WordPerfect file. |
| CVE-2003-0665 | High | 2003-10-20 | Not applicable | Working exploit published | Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control. |
| CVE-2003-0664 | High | 2003-10-20 | Not applicable | No public exploit | Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document. |
| CVE-2003-0661 | Medium | 2003-10-20 | Not applicable | No public exploit | The NetBT Name Service (NBNS) for NetBIOS in Windows NT 4.0, 2000, XP, and Server 2003 may include random memory in a response to a NBNS query, which could allow remote attackers to obtain sensitive information. |
| CVE-2003-0658 | Medium | 2003-10-20 | Not applicable | No public exploit | Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files via a certain URL, possibly related to rewrite rules. |
| CVE-2003-0630 | High | 2003-10-20 | Not applicable | No public exploit | Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator (atari800) before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrated with the -osa_rom argument. |
| CVE-2003-0347 | High | 2003-10-20 | Not applicable | Working exploit published | Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter. |
| CVE-2003-1062 | Medium | 2003-10-15 | Not applicable | No public exploit | Unknown vulnerability in the sysinfo system call for Solaris for SPARC 2.6 through 9, and Solaris for x86 2.6, 7, and 8, allows local users to read kernel memory. |
| CVE-2003-1061 | Low | 2003-10-14 | Not applicable | No public exploit | Race condition in Solaris 2.6 through 9 allows local users to cause a denial of service (kernel panic), as demonstrated via the namefs function, pipe, and certain STREAMS routines. |
| CVE-2003-0791 | Critical | 2003-10-07 | Not applicable | No public exploit | The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed. |
| CVE-2003-0827 | Medium | 2003-10-06 | Not applicable | No public exploit | The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service (crash) via a long packet to UDP port 523. |
| CVE-2003-0826 | High | 2003-10-06 | Not applicable | Working exploit published | lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack. |
| CVE-2003-0805 | High | 2003-10-06 | Not applicable | Working exploit published | Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long filename as a result of a LIST command, and (2) the GSisText function, which calculates the view-type. |
| CVE-2003-0803 | High | 2003-10-06 | Not applicable | Working exploit published | Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user. |
| CVE-2003-0802 | Medium | 2003-10-06 | Not applicable | Working exploit published | Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root, and the physical path of the NED server, via a "retrieve" action with a location parameter of . (dot). |
| CVE-2003-0801 | Medium | 2003-10-06 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute arbitrary web script and steal cookies via a URL to the docs/ directory that contains the script. |
| CVE-2003-0785 | High | 2003-10-06 | Not applicable | No public exploit | ipmasq before 3.5.12, in certain configurations, may forward packets to the external interface even if the packets are not associated with an established connection, which could allow remote attackers to bypass intended filtering. |
| CVE-2003-0784 | High | 2003-10-06 | Not applicable | No public exploit | Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that contains format string specifiers. |
| CVE-2003-0783 | High | 2003-10-06 | Not applicable | Working exploit published | Multiple buffer overflows in hztty 2.0 allow local users to gain root privileges. |
| CVE-2003-0759 | High | 2003-10-06 | Not applicable | Working exploit published | Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privileges via a long command line argument. |
| CVE-2003-0758 | High | 2003-10-06 | Not applicable | Working exploit published | Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users to gain root privileges via a long command line argument. |
| CVE-2003-0742 | High | 2003-10-06 | Not applicable | No public exploit | SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to run as if it were called from ncsa_httpd, then modifying the PATH environment variable to point to a malicious "hostname" program. |
| CVE-2003-0697 | High | 2003-10-06 | Not applicable | No public exploit | Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows local users to cause a denial of service (crash) or gain root privileges. |
| CVE-2003-0695 | High | 2003-10-06 | Not applicable | No public exploit | Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffer_free in buffer.c, or (3) a separate function in channels.c, a different vulnerability than CVE-2003-0693. |
| CVE-2003-0694 | High | 2003-10-06 | Not applicable | Exploited | The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c. |
| CVE-2003-0692 | High | 2003-10-06 | Not applicable | No public exploit | KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session. |
| CVE-2003-0690 | High | 2003-10-06 | Not applicable | No public exploit | KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module. |
| CVE-2003-0682 | High | 2003-10-06 | Not applicable | No public exploit | "Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695. |
| CVE-2003-0681 | High | 2003-10-06 | Not applicable | Exploited | A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences. |
| CVE-2003-0680 | High | 2003-10-06 | Not applicable | No public exploit | Unknown vulnerability in NFS for SGI IRIX 6.5.21 and earlier may allow an NFS client to bypass read-only restrictions. |
| CVE-2003-1053 | Medium | 2003-10-03 | Not applicable | No public exploit | Multiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long (1) -KCONV command line option or (2) XSHISENLIB environment variable. |
| CVE-2003-0780 | High | 2003-09-22 | Not applicable | Working exploit published | Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field. |
| CVE-2003-0779 | High | 2003-09-22 | Not applicable | No public exploit | SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string. |
| CVE-2003-0778 | Medium | 2003-09-22 | Not applicable | No public exploit | saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow attackers to cause a denial of service (memory consumption). |
| CVE-2003-0777 | Medium | 2003-09-22 | Not applicable | No public exploit | saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent strings from being null terminated and cause a denial of service (segmentation fault). |
| CVE-2003-0776 | High | 2003-09-22 | Not applicable | No public exploit | saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences. |
| CVE-2003-0775 | Medium | 2003-09-22 | Not applicable | No public exploit | saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service (memory consumption or crash). |
| CVE-2003-0774 | High | 2003-09-22 | Not applicable | No public exploit | saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of service (segmentation fault) when invalid memory is accessed. |
| CVE-2003-0773 | High | 2003-09-22 | Not applicable | No public exploit | saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf. |
| CVE-2003-0772 | High | 2003-09-22 | Not applicable | Working exploit published | Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments. |
| CVE-2003-0771 | Medium | 2003-09-22 | Not applicable | No public exploit | Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does. |
| CVE-2003-0770 | High | 2003-09-22 | Not applicable | Working exploit published | FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement. |