Latest CVE Feed
-
7.5
HIGHCVE-2003-0323
Multiple buffer overflows in ircII 20020912 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via responses that are not properly fed to the my_strcat function by (1) ctcp_buffer, (2) cannot_join_... Read more
Affected Products : ircii- EPSS Score: %1.01
- Published: Jun. 09, 2003
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2003-0358
Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.... Read more
- EPSS Score: %0.23
- Published: Jun. 09, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-1463
Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers (ISN), which allows remote attackers t... Read more
- EPSS Score: %11.01
- Published: Jun. 09, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0189
The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which allows remote attackers to cause a denial of service (failed Basic authentication with valid userna... Read more
Affected Products : http_server- EPSS Score: %19.41
- Published: Jun. 09, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0307
Poster version.two allows remote authenticated users to gain administrative privileges by appending the "|" field separator and an "admin" value into the email address field.... Read more
Affected Products : poster- EPSS Score: %0.64
- Published: Jun. 09, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0328
EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect lengt... Read more
- EPSS Score: %5.89
- Published: Jun. 09, 2003
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2002-1455
Multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd allow remote attackers to insert script or HTML into web pages via (1) test.php, (2) test.shtml, or (3) redir.exe.... Read more
Affected Products : omnihttpd- EPSS Score: %0.45
- Published: Jun. 09, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-0356
Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync,... Read more
Affected Products : ethereal- EPSS Score: %28.41
- Published: Jun. 09, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0227
The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Ser... Read more
- EPSS Score: %48.65
- Published: Jun. 09, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0226
Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or (2) SEARCH method, which generates an error condition that is not properly handled.... Read more
- EPSS Score: %40.64
- Published: Jun. 09, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-1068
Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4659277, a different vulnerability than CVE-2003-1082.... Read more
- EPSS Score: %0.05
- Published: Jun. 06, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-1206
Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crash) via "%s" or "%n" sequences in (1) the username during login, or other FTP commands such as (2) dir.... Read more
Affected Products : crob_ftp_server- EPSS Score: %1.09
- Published: Jun. 03, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-1069
The Telnet daemon (in.telnetd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (CPU consumption by infinite loop).... Read more
- EPSS Score: %0.76
- Published: Jun. 03, 2003
- Modified: Apr. 03, 2025
-
6.8
MEDIUMCVE-2003-0273
Cross-site scripting (XSS) vulnerability in the web interface for Request Tracker (RT) 1.0 through 1.0.7 allows remote attackers to execute script via message bodies.... Read more
Affected Products : request_tracker- EPSS Score: %0.87
- Published: May. 27, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-0274
Buffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute arbitrary code via a long ULISTPROC_UMASK value.... Read more
Affected Products : listproc- EPSS Score: %4.39
- Published: May. 27, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0238
The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CPU consumption) by spoofing the address of an ADS server and sending HTML with a -1 width in a table tag.... Read more
Affected Products : icq- EPSS Score: %1.12
- Published: May. 27, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0235
Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command.... Read more
Affected Products : icq- EPSS Score: %0.90
- Published: May. 27, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0228
Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an ... Read more
Affected Products : windows_media_player- EPSS Score: %72.22
- Published: May. 27, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-0262
leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges, which KATAXWR is not designed to have.... Read more
Affected Products : leksbot- EPSS Score: %0.18
- Published: May. 27, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0263
Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) 1.22 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands.... Read more
Affected Products : ftgatepro- EPSS Score: %20.08
- Published: May. 27, 2003
- Modified: Apr. 03, 2025