Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service (crash) by renaming a file to the "con" MS-DOS device name.
Max CVSS
5.0
EPSS Score
1.83%
Published
2003-08-06
Updated
2017-07-11
The checklogin function in omail.pl for omail webmail 0.98.4 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) password, (2) domainname, or (3) username.
Max CVSS
10.0
EPSS Score
0.80%
Published
2003-08-19
Updated
2017-07-11
Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML via the method parameter.
Max CVSS
4.3
EPSS Score
1.02%
Published
2003-08-11
Updated
2017-07-11
The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy.
Max CVSS
7.5
EPSS Score
1.62%
Published
2003-08-20
Updated
2018-10-30
Buffer overflow in Internet Explorer 6 SP1 for certain languages that support double-byte encodings (e.g., Japanese) allows remote attackers to execute arbitrary code via the Type property of an Object tag, a variant of CVE-2003-0344.
Max CVSS
7.5
EPSS Score
7.72%
Published
2003-08-27
Updated
2021-07-23
The C-Media PCI sound driver in Linux before 2.4.21 does not use the get_user function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0700.
Max CVSS
7.5
EPSS Score
0.42%
Published
2003-08-27
Updated
2017-10-11
Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response.
Max CVSS
7.5
EPSS Score
0.42%
Published
2003-08-27
Updated
2016-10-18
Unknown vulnerability in the libcpr library for the Checkpoint/Restart (cpr) system on SGI IRIX 6.5.21f and earlier allows local users to truncate or overwrite certain files.
Max CVSS
2.1
EPSS Score
0.04%
Published
2003-08-27
Updated
2008-09-10
Cisco CSS 11000 routers on the CS800 chassis allow remote attackers to cause a denial of service (CPU consumption or reboot) via a large number of TCP SYN packets to the circuit IP address, aka "ONDM Ping failure."
Max CVSS
5.0
EPSS Score
0.21%
Published
2003-08-27
Updated
2008-09-10
Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (aka Sun ONE) allows remote attackers to read arbitrary files via "..%2f" (partially encoded dot dot) sequences.
Max CVSS
5.0
EPSS Score
1.03%
Published
2003-08-27
Updated
2016-10-18
Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication, which is not properly handled when recording a log message.
Max CVSS
7.5
EPSS Score
0.38%
Published
2003-08-27
Updated
2008-09-10
Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via the device name argument, as demonstrated in Sustworks IPNetSentryX and IPNetMonitorX the setuid program RunTCPFlow.
Max CVSS
7.2
EPSS Score
0.04%
Published
2003-08-27
Updated
2008-09-10
Sustworks IPNetSentryX and IPNetMonitorX allow local users to sniff network packets via the setuid helper applications (1) RunTCPDump, which calls tcpdump, and (2) RunTCPFlow, which calls tcpflow.
Max CVSS
2.1
EPSS Score
0.04%
Published
2003-08-27
Updated
2008-09-10
Unknown vulnerability in Solaris 2.6 through 9 causes a denial of service (system panic) via "a rare race condition" or an attack by local users.
Max CVSS
1.2
EPSS Score
0.04%
Published
2003-08-27
Updated
2018-10-30
Multiple SQL injection vulnerabilities in the infolog module for phpgroupware 0.9.14 and earlier could allow remote attackers to conduct unauthorized database actions.
Max CVSS
7.5
EPSS Score
0.10%
Published
2003-08-27
Updated
2008-09-05
eroaster before 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file that is used as a lockfile.
Max CVSS
2.1
EPSS Score
0.04%
Published
2003-08-27
Updated
2016-10-18
rscsi in cdrtools 2.01 and earlier allows local users to overwrite arbitrary files and gain root privileges by specifying the target file as a command line argument, which is modified while rscsi is running with privileges.
Max CVSS
7.2
EPSS Score
0.04%
Published
2003-08-27
Updated
2016-10-18
Buffer overflow in autorespond may allow remote attackers to execute arbitrary code as the autorespond user via qmail.
Max CVSS
7.5
EPSS Score
0.40%
Published
2003-08-27
Updated
2008-09-10
The OSI networking kernel (sys/netiso) in NetBSD 1.6.1 and earlier does not use a BSD-required "PKTHDR" mbuf when sending certain error responses to the sender of an OSI packet, which allows remote attackers to cause a denial of service (kernel panic or crash) via certain OSI packets.
Max CVSS
5.0
EPSS Score
0.17%
Published
2003-08-27
Updated
2008-09-10
Buffer overflow in xtokkaetama allows local users to gain privileges via a long -nickname command line argument, a different vulnerability than CVE-2003-0611.
Max CVSS
4.6
EPSS Score
0.04%
Published
2003-08-27
Updated
2016-10-18
Buffer overflow in the mylo_log logging function for mod_mylo 0.2.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
Max CVSS
7.5
EPSS Score
1.02%
Published
2003-08-27
Updated
2008-09-05
Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. (dot dot) sequences in filenames in a .APK (Zip) file.
Max CVSS
7.5
EPSS Score
4.33%
Published
2003-08-27
Updated
2016-10-18
Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long HOME environment variable.
Max CVSS
7.2
EPSS Score
0.04%
Published
2003-08-27
Updated
2008-09-10
Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via an extremely long (2GB) HTTP GET request.
Max CVSS
7.5
EPSS Score
2.30%
Published
2003-08-27
Updated
2008-09-10
Multiple buffer overflows in ActiveX controls used by Trend Micro HouseCall 5.5 and 5.7, and Damage Cleanup Server 1.0, allow remote attackers to execute arbitrary code via long parameter strings.
Max CVSS
7.5
EPSS Score
2.42%
Published
2003-08-27
Updated
2008-09-10
205 vulnerabilities found
1 2 3 4 5 6 7 8 9
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!