Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDAP lookup.
Max CVSS
7.2
EPSS Score
0.04%
Published
2003-07-03
Updated
2018-10-30
Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a long Request-URI.
Max CVSS
7.5
EPSS Score
0.40%
Published
2003-07-24
Updated
2008-09-05
Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt parameter.
Max CVSS
7.5
EPSS Score
1.84%
Published
2003-07-24
Updated
2008-09-10
Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul parameter.
Max CVSS
7.5
EPSS Score
1.84%
Published
2003-07-24
Updated
2008-09-10
Buffer overflow in net_swapscore for typespeed 0.4.1 and earlier allows remote attackers to execute arbitrary code.
Max CVSS
7.5
EPSS Score
2.59%
Published
2003-07-24
Updated
2016-10-18
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
Max CVSS
7.5
EPSS Score
5.07%
Published
2003-07-24
Updated
2017-10-11
Multiple buffer overflows in gnocatan 0.6.1 and earlier allow attackers to execute arbitrary code.
Max CVSS
7.5
EPSS Score
0.31%
Published
2003-07-24
Updated
2008-09-05
Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors.
Max CVSS
10.0
EPSS Score
0.34%
Published
2003-07-24
Updated
2017-10-11
The tvb_get_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences.
Max CVSS
10.0
EPSS Score
0.34%
Published
2003-07-24
Updated
2017-10-11
The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow.
Max CVSS
7.5
EPSS Score
2.93%
Published
2003-07-24
Updated
2017-10-11
Buffer overflow in mikmod 3.1.6 and earlier allows remote attackers to execute arbitrary code via an archive file that contains a file with a long filename.
Max CVSS
7.5
EPSS Score
4.82%
Published
2003-07-24
Updated
2017-10-11
Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by setting the vgn_creds cookie to an arbitrary value and directly accessing the save template.
Max CVSS
6.4
EPSS Score
0.38%
Published
2003-07-02
Updated
2016-10-18
Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, with the SSI EXEC feature enabled, allows remote attackers to execute arbitrary code via a text variable to a Vignette Application that is later displayed.
Max CVSS
7.5
EPSS Score
1.79%
Published
2003-07-02
Updated
2016-10-18
Buffer overflow in FastTrack (FT) network code, as used in Kazaa 2.0.2 and possibly other versions and products, allows remote attackers to execute arbitrary code via a packet containing a large list of supernodes, aka "Packet 0' death."
Max CVSS
7.5
EPSS Score
5.25%
Published
2003-07-02
Updated
2016-10-18
Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes admin_iplog.php.
Max CVSS
7.5
EPSS Score
2.14%
Published
2003-07-02
Updated
2024-02-13
objects.inc.php4 in BLNews 2.1.3 allows remote attackers to execute arbitrary PHP code via a Server[path] parameter that points to malicious code on an attacker-controlled web site.
Max CVSS
7.5
EPSS Score
2.75%
Published
2003-07-02
Updated
2016-10-18
Directory traversal vulnerability in ST FTP Service 3.0 allows remote attackers to list arbitrary directories via a CD command with a DoS drive letter argument (e.g. E:).
Max CVSS
6.4
EPSS Score
0.62%
Published
2003-07-02
Updated
2016-10-18
Format string vulnerability in Magic WinMail Server 2.3, and possibly other 2.x versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the PASS command.
Max CVSS
7.5
EPSS Score
3.26%
Published
2003-07-02
Updated
2016-10-18
OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.
Max CVSS
7.5
EPSS Score
2.50%
Published
2003-07-02
Updated
2017-10-11
Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option.
Max CVSS
7.2
EPSS Score
0.04%
Published
2003-07-02
Updated
2016-10-18
Buffer overflow in atftp daemon (atftpd) 0.6.1 and earlier, and possibly later versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename.
Max CVSS
7.5
EPSS Score
3.08%
Published
2003-07-02
Updated
2008-09-05

CVE-2003-0349

Public exploit
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.
Max CVSS
7.5
EPSS Score
96.47%
Published
2003-07-24
Updated
2018-10-12
A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the local system via HTML script.
Max CVSS
6.4
EPSS Score
1.35%
Published
2003-07-24
Updated
2018-10-12
23 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!