Latest CVE Feed
-
7.2
HIGHCVE-2003-0089
Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as (1) swinstall and (2) swmodify.... Read more
Affected Products : hp-ux- EPSS Score: %0.28
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-0972
Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.... Read more
Affected Products : screen- EPSS Score: %1.21
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0960
OpenCA before 0.9.1.4 does not use the correct certificate in a chain to check the serial, which could cause OpenCA to accept revoked or expired certificates.... Read more
Affected Products : openca- EPSS Score: %0.26
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2003-0932
Buffer overflow in omega-rpg 0.90 allows local users to execute arbitrary code via a long (1) command line or (2) environment variable.... Read more
Affected Products : omega-rpg- EPSS Score: %0.09
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0821
Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model.... Read more
- EPSS Score: %10.98
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0820
Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names" data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.... Read more
- EPSS Score: %22.03
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0822
Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.... Read more
Affected Products : windows_2000 windows_xp sharepoint_team_services frontpage_server_extensions iis- EPSS Score: %89.14
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2003-0858
Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.... Read more
- EPSS Score: %0.07
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0945
The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities.... Read more
Affected Products : sap_db- EPSS Score: %0.90
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0946
Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the email address ... Read more
Affected Products : clamav- EPSS Score: %1.96
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-0948
Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable.... Read more
Affected Products : wireless_tools- EPSS Score: %0.12
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0943
web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive information or redirect attacks against internal databases via (1) waecho, (2) Web SQL Interface... Read more
Affected Products : sap_db- EPSS Score: %0.90
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2003-0955
OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code in 3.4 via a program with an invalid header that is not properly handled by (1) ibcs2_exec.c in the iBCS2 emulation (compat_ibcs2... Read more
Affected Products : openbsd- EPSS Score: %0.44
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0976
NFS Server (XNFS.NLM) for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could allow users to mount file systems when XNFS should deny the host.... Read more
Affected Products : netware- EPSS Score: %0.26
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0327
Sybase Adaptive Server Enterprise (ASE) 12.5 allows remote attackers to cause a denial of service (hang) via a remote password array with an invalid length, which triggers a heap-based buffer overflow.... Read more
Affected Products : adaptive_server_enterprise- EPSS Score: %0.81
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0970
The Network Management Port on Sun Fire B1600 systems allows remote attackers to cause a denial of service (packet loss) via ARP packets, which cause all ports to become temporarily disabled.... Read more
Affected Products : sun_fire- EPSS Score: %0.66
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-0936
Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe.... Read more
Affected Products : pcanywhere- EPSS Score: %0.07
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0974
Applied Watch Command Center allows remote attackers to conduct unauthorized activities without authentication, such as (1) add new users to a console, as demonstrated using appliedsnatch.c, or (2) add spurious IDS rules to sensors, as demonstrated using ... Read more
Affected Products : applied_watch_command_center- EPSS Score: %4.11
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-0947
Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable.... Read more
Affected Products : wireless_tools- EPSS Score: %0.09
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0951
Partition Manager (parmgr) in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attackers to obtain sensitive data or gain privileges.... Read more
Affected Products : hp-ux- EPSS Score: %0.36
- Published: Dec. 15, 2003
- Modified: Apr. 03, 2025