Total
210374 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2003-0340 | 1 Demarc Security | 1 Puresecure | 2008-09-05 | 7.5 HIGH | N/A |
Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, which allows attackers to steal login names and passwords to gain privileges. | |||||
CVE-2003-0355 | 2 Apple, Kde | 2 Safari, Konqueror Embedded | 2008-09-05 | 5.0 MEDIUM | N/A |
Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates. | |||||
CVE-2003-0359 | 1 Stichting Mathematisch Centrum | 1 Nethack | 2008-09-05 | 4.6 MEDIUM | N/A |
nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replacing the original binaries with malicious code. | |||||
CVE-2003-0360 | 1 Debian | 1 Debian Linux | 2008-09-05 | 7.5 HIGH | N/A |
Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code. | |||||
CVE-2003-0361 | 1 Debian | 1 Debian Linux | 2008-09-05 | 7.5 HIGH | N/A |
gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp. | |||||
CVE-2003-0362 | 1 Debian | 1 Debian Linux | 2008-09-05 | 5.0 MEDIUM | N/A |
Buffer overflow in gPS before 0.10.2 may allow local users to cause a denial of service (SIGSEGV) in rgpsp via long command lines. | |||||
CVE-2003-0363 | 1 Licq | 1 Licq | 2008-09-05 | 7.5 HIGH | N/A |
Format string vulnerability in LICQ 1.2.6, 1.0.3 and possibly other versions allows remote attackers to perform unknown actions via format string specifiers. | |||||
CVE-2003-0366 | 1 Lysator | 1 Lyskom-server | 2008-09-05 | 5.0 MEDIUM | N/A |
lyskom-server 2.0.7 and earlier allows unauthenticated users to cause a denial of service (CPU consumption) via a large query. | |||||
CVE-2003-0378 | 1 Apple | 1 Mac Os X | 2008-09-05 | 7.5 HIGH | N/A |
The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set. | |||||
CVE-2003-0380 | 1 Atftpd | 1 Atftpd | 2008-09-05 | 7.5 HIGH | N/A |
Buffer overflow in atftp daemon (atftpd) 0.6.1 and earlier, and possibly later versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename. | |||||
CVE-2003-0381 | 1 Norman Ramsey | 1 Noweb | 2008-09-05 | 2.1 LOW | N/A |
Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the noroff script. | |||||
CVE-2003-0389 | 1 Rsa | 1 Ace Agent | 2008-09-05 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in the secure redirect function of RSA ACE/Agent 5.0 for Windows, and 5.x for Web, allows remote attackers to insert arbitrary web script and possibly cause users to enter a passphrase via a GET request containing the script. | |||||
CVE-2003-0419 | 1 Smc Networks | 1 Barricade Wireless Cable Dsl Broadband Router | 2008-09-05 | 5.0 MEDIUM | N/A |
SMC Networks Barricade Wireless Cable/DSL Broadband Router SMC7004VWBR allows remote attackers to cause a denial of service via certain packets to PPTP port 1723 on the internal interface. | |||||
CVE-2003-0421 | 1 Apple | 1 Darwin Streaming Server | 2008-09-05 | 10.0 HIGH | N/A |
Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220, a different vulnerability than CVE-2003-0502. | |||||
CVE-2003-0426 | 1 Apple | 1 Darwin Streaming Server | 2008-09-05 | 10.0 HIGH | N/A |
The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator. | |||||
CVE-2003-0433 | 1 Gnocatan-develop | 1 Gnocatan | 2008-09-05 | 7.5 HIGH | N/A |
Multiple buffer overflows in gnocatan 0.6.1 and earlier allow attackers to execute arbitrary code. | |||||
CVE-2003-0438 | 1 Yuuichi Teranishi | 1 Eldav | 2008-09-05 | 1.2 LOW | N/A |
eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files. | |||||
CVE-2003-0445 | 1 Webfs | 1 Webfs | 2008-09-05 | 7.5 HIGH | N/A |
Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a long Request-URI. | |||||
CVE-2003-0451 | 1 Xblockout | 1 Xbl | 2008-09-05 | 4.6 MEDIUM | N/A |
Multiple buffer overflows in xbl before 1.0k allow local users to gain privileges via certain long command line arguments. | |||||
CVE-2003-0452 | 1 Gunnar Ritter | 1 Osh | 2008-09-05 | 4.6 MEDIUM | N/A |
Buffer overflows in osh before 1.7-11 allow local users to execute arbitrary code and bypass shell restrictions via (1) long environment variables or (2) long "file redirections." |