Latest CVE Feed
-
7.5
HIGHCVE-2003-0064
The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which c... Read more
- EPSS Score: %0.87
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2002-1472
Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users to gain root privileges via a modified LD_PRELOAD environment variable that points to a malicious module.... Read more
- EPSS Score: %0.06
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0068
The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious ... Read more
Affected Products : eterm- EPSS Score: %0.67
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2003-0079
The DEC UDK processing feature in the hanterm (hanterm-xf) terminal emulator before 2.0.5 allows attackers to cause a denial of service via a certain character escape sequence that causes the terminal to enter a tight loop.... Read more
Affected Products : hanterm-xf- EPSS Score: %0.08
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0066
The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious s... Read more
Affected Products : rxvt- EPSS Score: %0.71
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2002-1511
The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.... Read more
- EPSS Score: %0.95
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2003-0071
The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows attackers to cause a denial of service via a certain character escape sequence that causes the terminal to enter a tight loop.... Read more
Affected Products : x11r6- EPSS Score: %0.08
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0093
The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service (crash) via an invalid RADIUS packet with a header length field of 0, which causes tcpdump to generate data within an infinite loop.... Read more
Affected Products : tcpdump- EPSS Score: %1.50
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0023
The menuBar feature in rxvt 2.7.8 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequence that inserts the commands into the menu.... Read more
Affected Products : rxvt- EPSS Score: %0.54
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0065
The uxterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which c... Read more
Affected Products : uxterm- EPSS Score: %0.67
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0022
The "screen dump" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.... Read more
Affected Products : rxvt- EPSS Score: %0.76
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
3.6
LOWCVE-2002-1509
A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which allows other users in the same group to read or modify the new user's incoming email.... Read more
Affected Products : linux- EPSS Score: %0.08
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-0101
miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a ses... Read more
- EPSS Score: %15.50
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-0099
Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers to cause a denial of service or execute arbitrary code, related to usage of the vsprintf function.... Read more
Affected Products : apcupsd- EPSS Score: %0.12
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-0063
The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the... Read more
- EPSS Score: %1.31
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2003-0098
Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server.... Read more
- EPSS Score: %6.82
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2002-0842
Format string vulnerability in certain third party modifications to mod_dav for logging bad gateway messages (e.g. Oracle9i Application Server 9.0.2) allows remote attackers to execute arbitrary code via a destination URI that forces a "502 Bad Gateway" r... Read more
Affected Products : application_server- EPSS Score: %38.36
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2003-0078
ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an information leak (timing discrepancy) that may make it easier to launch cryptogr... Read more
- EPSS Score: %18.67
- Published: Mar. 03, 2003
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2003-1078
The FTP client for Solaris 2.6, 7, and 8 with the debug (-d) flag enabled displays the user password on the screen during login.... Read more
- EPSS Score: %0.60
- Published: Feb. 28, 2003
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2003-0019
uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode.... Read more
Affected Products : linux- EPSS Score: %0.66
- Published: Feb. 19, 2003
- Modified: Apr. 03, 2025