CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   

Security Vulnerabilities Published In 2003(Bypass)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2003-1491 94 Bypass 2003-12-31 2017-07-29
7.5
 None Remote Low Not required Partial Partial Partial
Kerio Personal Firewall (KPF) 2.1.4 has a default rule to accept incoming packets from DNS (UDP port 53), which allows remote attackers to bypass the firewall filters via packets with a source port of 53.
2 CVE-2003-1485 20 Bypass 2003-12-31 2008-09-05
5.0
 None Remote Low Not required None Partial None
Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contains "multiple extensions combined with large blocks of white space."
3 CVE-2003-1449 16 Bypass 2003-12-31 2017-07-29
7.5
 None Remote Low Not required Partial Partial Partial
Aladdin Knowlege Systems eSafe Gateway 3.5.126.0 does not check the entire stream of Content Vectoring Protocol (CVP) data, which allows remote attackers to bypass virus protection.
4 CVE-2003-1443 20 Bypass 2003-12-31 2017-07-29
4.4
 None Local Medium Not required Partial Partial Partial
Kaspersky Antivirus (KAV) 4.0.9.0 does not detect viruses in files with MS-DOS device names in their filenames, which allows local users to bypass virus protection, as demonstrated using aux.vbs and aux.com.
5 CVE-2003-1341 16 Bypass 2003-12-31 2017-07-29
7.5
 None Remote Low Not required Partial Partial Partial
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.
6 CVE-2003-1330 Bypass 2003-12-31 2017-07-29
5.0
 None Remote Low Not required None Partial None
Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom "on strip unsuccessful" hooks, which allows remote attackers to bypass e-mail attachment filtering policies via an attachment that MAILsweeper can detect but not remove.
7 CVE-2003-1328 Exec Code Bypass 2003-02-19 2021-07-23
7.5
 None Remote Low Not required Partial Partial Partial
The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp functionality."
8 CVE-2003-1326 Bypass 2003-02-19 2021-07-23
7.5
 None Remote Low Not required Partial Partial Partial
Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model to run malicious script or arbitrary programs via dialog boxes, aka "Improper Cross Domain Security Validation with dialog box."
9 CVE-2003-1233 Bypass 2003-12-31 2017-07-11
2.1
 None Local Low Not required None Partial None
Pedestal Software Integrity Protection Driver (IPD) 1.3 and earlier allows privileged attackers, such as rootkits, to bypass file access restrictions to the Windows kernel by using the NtCreateSymbolicLinkObject function to create a symbolic link to (1) \Device\PhysicalMemory or (2) to a drive letter using the subst command.
10 CVE-2003-1169 Bypass 2003-12-31 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users to bypass access restrictions by importing NukoInfo values in certain DATEV keys, which disables Nutzungskontrolle.
11 CVE-2003-1161 Bypass 2003-12-31 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
exit.c in Linux kernel 2.6-test9-CVS, as stored on kernel.bkbits.net, was modified to contain a backdoor, which could allow local users to elevate their privileges by passing __WCLONE|__WALL to the sys_wait4 function.
12 CVE-2003-1160 +Priv Bypass 2003-10-30 2017-07-11
10.0
 None Remote Low Not required Complete Complete Complete
FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges via an HTTP request to aindex.htm that contains double leading slashes (//).
13 CVE-2003-1154 Bypass 2003-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
MAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message with a malformed zip attachment, as exploited by certain MIMAIL virus variants.
14 CVE-2003-1127 Bypass 2003-12-31 2017-07-11
5.0
 None Remote Low Not required Partial None None
Whale Communications e-Gap 2.5 on Windows 2000 allows remote attackers to obtain the source code for the login page via the HTTP TRACE method, which bypasses the preprocessor.
15 CVE-2003-1123 Bypass 2003-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model.
16 CVE-2003-1116 Bypass +Info 2003-12-31 2017-07-11
5.0
 None Remote Low Not required Partial None None
The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing requests to the TNS Listener.
17 CVE-2003-1107 Bypass 2003-12-31 2017-07-11
5.1
 None Remote High Not required Partial Partial Partial
The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions.
18 CVE-2003-1063 Bypass 2003-08-20 2018-10-30
7.5
 None Remote Low Not required Partial Partial Partial
The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy.
19 CVE-2003-0937 Bypass 2003-12-15 2016-10-18
4.6
 None Local Low Not required Partial Partial Partial
SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PID) by obtaining a procfs file descriptor for the file and calling execve() on a setuid or setgid program, which leaves the descriptor open to the user.
20 CVE-2003-0896 Exec Code Bypass 2003-11-17 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager's checkPackageAccess method.
21 CVE-2003-0838 Exec Code Bypass 2003-11-17 2021-07-23
7.5
 None Remote Low Not required Partial Partial Partial
Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but later executes as an HTA application, a different vulnerability than CVE-2003-0532, and as exploited using the QHosts Trojan horse (aka Trojan.Qhosts, QHosts-1, VBS.QHOSTS, or aolfix.exe).
22 CVE-2003-0821 Exec Code Bypass 2003-12-15 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model.
23 CVE-2003-0785 Bypass 2003-10-06 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
ipmasq before 3.5.12, in certain configurations, may forward packets to the external interface even if the packets are not associated with an established connection, which could allow remote attackers to bypass intended filtering.
24 CVE-2003-0768 XSS Bypass 2003-09-22 2016-10-18
6.8
 None Remote Medium Not required Partial Partial Partial
Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null character in the beginning of a tag name.
25 CVE-2003-0754 Bypass 2003-10-20 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp_users array, which is used for authentication.
26 CVE-2003-0752 Sql Bypass 2003-10-20 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in global.php3 of AttilaPHP 3.0, and possibly earlier versions, allows remote attackers to bypass authentication via a modified cook_id parameter.
27 CVE-2003-0750 Bypass 2003-10-20 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
secure.php in PY-Membres 4.2 and earlier allows remote attackers to bypass authentication by setting the adminpy parameter.
28 CVE-2003-0734 Bypass 2003-10-20 2008-09-10
10.0
 None Remote Low Not required Complete Complete Complete
Unknown vulnerability in the pam_filter mechanism in pam_ldap before version 162, when LDAP based authentication is being used, allows users to bypass host-based access restrictions and log onto the system.
29 CVE-2003-0683 Bypass 2003-11-03 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
NFS in SGI 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an /etc/exports entry uses wildcards without any hostnames or groups, which could allow attackers to bypass intended restrictions.
30 CVE-2003-0680 Bypass 2003-10-06 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Unknown vulnerability in NFS for SGI IRIX 6.5.21 and earlier may allow an NFS client to bypass read-only restrictions.
31 CVE-2003-0664 Bypass 2003-10-20 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
Microsoft Word 2002, 2000, 97, and 98(J) does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document.
32 CVE-2003-0604 Bypass 2003-08-27 2018-08-13
7.5
 None Remote Low Not required Partial Partial Partial
Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File:// URL.
33 CVE-2003-0589 Bypass 2003-08-18 2016-10-18
10.0
 None Remote Low Not required Complete Complete Complete
admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.
34 CVE-2003-0588 Bypass 2003-08-18 2016-10-18
10.0
 None Remote Low Not required Complete Complete Complete
admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.
35 CVE-2003-0585 Exec Code Sql Bypass 2003-08-18 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in login.asp of Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to bypass authentication and execute arbitrary SQL code via the (1) user or (2) pass parameters.
36 CVE-2003-0500 +Priv Sql Bypass 2003-08-07 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name.
37 CVE-2003-0452 Exec Code Overflow Bypass 2003-08-07 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
Buffer overflows in osh before 1.7-11 allow local users to execute arbitrary code and bypass shell restrictions via (1) long environment variables or (2) long "file redirections."
38 CVE-2003-0386 Bypass 2003-07-02 2017-10-11
7.5
 None Remote Low Not required Partial Partial Partial
OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "[email protected]" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.
39 CVE-2003-0332 Bypass 2003-06-09 2016-10-18
7.6
 None Remote High Not required Complete Complete Complete
The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a security check, which allows remote attackers to bypass authentication via a filename with a .ats extension instead of a .hts extension.
40 CVE-2003-0317 Bypass 2003-12-31 2008-10-03
7.5
 None Remote Low Not required Partial Partial Partial
iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded characters.
41 CVE-2003-0309 Bypass 2003-06-09 2021-07-23
7.5
 None Remote Low Not required Partial Partial Partial
Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which eventually cause Internet Explorer to execute the program, as demonstrated using a large number of FRAME or IFRAME tags, aka the "File Download Dialog Vulnerability."
42 CVE-2003-0240 Bypass 2003-06-09 2017-07-11
10.0
 None Remote Low Not required Complete Complete Complete
The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).
43 CVE-2003-0217 XSS Bypass 2003-06-16 2016-10-18
6.8
 None Remote Medium Not required Partial Partial Partial
Cross-site scripting (XSS) vulnerability in Neoteris Instant Virtual Extranet (IVE) 3.01 and earlier allows remote attackers to insert arbitrary web script and bypass authentication via a certain CGI script.
44 CVE-2003-0216 287 Bypass 2003-05-12 2008-09-10
9.3
 None Remote Medium Not required Complete Complete Complete
Unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to the enable mode without a password.
45 CVE-2003-0215 Sql Bypass 2003-05-12 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via the (1) username and (2) password fields, and possibly other fields.
46 CVE-2003-0121 Bypass 2003-03-18 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not specify a MIME-Version header field, which is processed by some mail clients.
47 CVE-2003-0111 Exec Code Bypass 2003-05-05 2019-04-30
7.5
 None Remote Low Not required Partial Partial Partial
The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security checks and execute arbitrary code via a malicious Java applet, aka "Flaw in Microsoft VM Could Enable System Compromise."
48 CVE-2003-0106 Bypass 2003-04-02 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded with escapes, Unicode, or UTF-8.
49 CVE-2003-0097 Exec Code Bypass 2003-03-03 2018-10-30
7.5
 None Remote Low Not required Partial Partial Partial
Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possibly execute PHP code, by bypassing the CGI force redirect settings (cgi.force_redirect or --enable-force-cgi-redirect).
50 CVE-2003-0080 Bypass 2003-03-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
The iptables ruleset in Gnome-lokkit in Red Hat Linux 8.0 does not include any rules in the FORWARD chain, which could allow attackers to bypass intended access restrictions if packet forwarding is enabled.
Total number of vulnerabilities : 62   Page : 1 (This Page)2
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.