Latest CVE Feed
-
7.2
HIGHCVE-2003-0490
The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical directories and files with world-writable permissions, which allows local users to gain privileges as other users by replacing programs wi... Read more
Affected Products : retrospect_client- EPSS Score: %0.04
- Published: Aug. 07, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-0493
Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after obtaining a valid session ID.... Read more
Affected Products : snitz_forums_2000- EPSS Score: %0.46
- Published: Aug. 07, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0503
Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service or execute arbitrary code via a long third argument.... Read more
Affected Products : windows_2000- EPSS Score: %10.58
- Published: Aug. 07, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0470
Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings.... Read more
Affected Products : security_check- EPSS Score: %17.66
- Published: Aug. 07, 2003
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2003-0479
Cross-site scripting (XSS) vulnerability in the guestbook for WebBBS allows remote attackers to insert arbitrary web script via the (1) Name, (2) Email, or (3) Message fields.... Read more
Affected Products : affordable_web_space_design_webbbs- EPSS Score: %0.31
- Published: Aug. 07, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-0473
Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications.... Read more
Affected Products : irix- EPSS Score: %0.49
- Published: Aug. 07, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0477
wzdftpd 0.1rc4 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command without an argument.... Read more
Affected Products : wzdftpd- EPSS Score: %0.66
- Published: Aug. 07, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-1205
Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service (crash) by renaming a file to the "con" MS-DOS device name.... Read more
Affected Products : crob_ftp_server- EPSS Score: %0.91
- Published: Aug. 06, 2003
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2003-0643
Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash).... Read more
Affected Products : linux_kernel- EPSS Score: %0.08
- Published: Jul. 25, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0445
Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a long Request-URI.... Read more
Affected Products : webfs- EPSS Score: %2.31
- Published: Jul. 24, 2003
- Modified: Apr. 03, 2025
-
6.4
MEDIUMCVE-2003-0348
A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the local system via HTML script.... Read more
- EPSS Score: %27.59
- Published: Jul. 24, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0435
Buffer overflow in net_swapscore for typespeed 0.4.1 and earlier allows remote attackers to execute arbitrary code.... Read more
Affected Products : typespeed- EPSS Score: %3.28
- Published: Jul. 24, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0436
Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul parameter.... Read more
Affected Products : mnogosearch- EPSS Score: %12.75
- Published: Jul. 24, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0437
Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt parameter.... Read more
Affected Products : mnogosearch- EPSS Score: %5.43
- Published: Jul. 24, 2003
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2003-0438
eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.... Read more
Affected Products : eldav- EPSS Score: %0.08
- Published: Jul. 24, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0251
ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the server, which causes ypserv to block.... Read more
Affected Products : ypserv_nis_server- EPSS Score: %2.51
- Published: Jul. 24, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0429
The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow.... Read more
- EPSS Score: %2.58
- Published: Jul. 24, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-0431
The tvb_get_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences.... Read more
- EPSS Score: %0.55
- Published: Jul. 24, 2003
- Modified: Apr. 03, 2025
-
3.6
LOWCVE-2003-0448
Portmon 1.7 and possibly earlier versions allows local users to read and write arbitrary files via the (1) -c (host file) or (2) -l (log file) command line options.... Read more
Affected Products : portmon- EPSS Score: %0.11
- Published: Jul. 24, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0349
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a la... Read more
Affected Products : windows_2000- EPSS Score: %88.21
- Published: Jul. 24, 2003
- Modified: Apr. 03, 2025