Latest CVE Feed
-
7.5
HIGHCVE-2003-0037
Buffer overflows in noffle news server 1.0.1 and earlier allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code.... Read more
Affected Products : noffle- EPSS Score: %2.09
- Published: Feb. 07, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0007
Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certif... Read more
Affected Products : outlook- EPSS Score: %5.00
- Published: Feb. 07, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-1252
The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities (XXE) fields in an HTTP POST request that is processed by the Sim... Read more
Affected Products : peopletools- EPSS Score: %0.42
- Published: Feb. 07, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-0034
Buffer overflow in the mtink status monitor, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long HOME environment variable.... Read more
Affected Products : mtink- EPSS Score: %0.15
- Published: Feb. 07, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0003
Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter informat... Read more
Affected Products : windows_2000 windows_xp windows_nt windows_2000_terminal_services windows_2000_terminal_services- EPSS Score: %27.08
- Published: Feb. 07, 2003
- Modified: Apr. 03, 2025
-
6.2
MEDIUMCVE-2003-0036
ml85p, as included in the printer-drivers package for Mandrake Linux, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable filenames of the form "mlg85p%d".... Read more
Affected Products : ml85p- EPSS Score: %0.05
- Published: Feb. 07, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0039
ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storm) via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not re... Read more
Affected Products : dhcpd- EPSS Score: %3.94
- Published: Feb. 07, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0017
Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that ends in certain illegal characters such as ">", which causes a different filename to be processed and served.... Read more
Affected Products : http_server- EPSS Score: %6.27
- Published: Feb. 07, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-0035
Buffer overflow in escputil, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long printer-name command line argument.... Read more
Affected Products : escputil- EPSS Score: %0.12
- Published: Feb. 07, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0015
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-pr... Read more
- EPSS Score: %62.85
- Published: Feb. 07, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-1090
Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.... Read more
Affected Products : absolutetelnet- EPSS Score: %23.01
- Published: Feb. 06, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-1075
Unknown vulnerability in the FTP server (in.ftpd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (temporary FTP server hang), which affects other active mode FTP clients.... Read more
- EPSS Score: %0.91
- Published: Jan. 27, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0001
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.... Read more
- EPSS Score: %3.61
- Published: Jan. 17, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-1394
Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.... Read more
Affected Products : tomcat- EPSS Score: %5.35
- Published: Jan. 17, 2003
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2002-1402
Buffer overflows in the (1) TZ and (2) SET TIME ZONE enivronment variables for PostgreSQL 7.2.1 and earlier allow local users to cause a denial of service and possibly execute arbitrary code.... Read more
Affected Products : postgresql- EPSS Score: %0.14
- Published: Jan. 17, 2003
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2002-1395
Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via imm... Read more
Affected Products : internet_message- EPSS Score: %0.08
- Published: Jan. 17, 2003
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2002-1398
Buffer overflow in the date parser for PostgreSQL before 7.2.2 allows attackers to cause a denial of service and possibly execute arbitrary code via a long date string, aka a vulnerability "in handling long datetime input."... Read more
Affected Products : postgresql- EPSS Score: %0.16
- Published: Jan. 17, 2003
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2003-0012
The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world-writable permissions for the data/mining directory when it runs, which allows local users to modify or delete the data.... Read more
Affected Products : bugzilla- EPSS Score: %0.06
- Published: Jan. 17, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-1403
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.... Read more
- EPSS Score: %0.06
- Published: Jan. 17, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0026
Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long host... Read more
Affected Products : dhcpd- EPSS Score: %12.42
- Published: Jan. 17, 2003
- Modified: Apr. 03, 2025