CVE Vulnerability Catalog

CVE-2003-1244 describes an SQL injection vulnerability in page_header.php in phpBB versions 2.0, 2.0.1, and 2.0.2. It allows remote attackers to brute force user passwords, potentially gaining unauthorized access to forums.

LICQ versions 1.2.6, 1.0.3, and possibly others have a format string vulnerability that allows remote attackers to perform unknown actions via format string specifiers.

X509TrustManager in Java Secure Socket Extension (JSSE) incorrectly calls the isClientTrusted method when determining server trust, leading to improper validation of digital certificates.

Buffer overflow in the prepare_reply function in request.c for Mathopd versions 1.2 through 1.5b13, and possibly earlier, allows remote attackers to cause a denial of service (server crash) and potentially execute arbitrary code via an HTTP request with a long path.

A PHP remote file inclusion vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, allows remote attackers to inject arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter.

Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long AUTH command to the POP3 server or AUTHENTICATE command to the IMAP server.

CVE-2003-1171 involves a heap-based buffer overflow in the sec_filter_out function in mod_security versions 1.7RC1 through 1.7.1 in Apache 2. This allows remote attackers to execute arbitrary code via a server-side script that sends a large amount of data.

KPopup 0.9.1 has a vulnerability related to trusting the PATH variable when executing the killall command. This allows local users to elevate their privileges by modifying the PATH variable to reference a malicious killall program.

The exit.c file in Linux kernel 2.6-test9-CVS was modified to contain a backdoor, allowing local users to elevate their privileges by passing __WCLONE|__WALL to the sys_wait4 function.

A vulnerability in KnowledgeBuilder (KnowledgeBase) allows remote attackers to execute arbitrary PHP code by modifying the 'page' parameter to reference a URL on a remote web server containing the code.

Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model.

Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, allowing remote attackers to modify arbitrary registry entries or configuration.

Buffer overflow in RealSystem Server 6.x, 7.x, and 8.x, and RealSystem Proxy 8.x, related to URL error handling, allows remote attackers to cause a denial of service and possibly execute arbitrary code.

The SIP implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages.

The SIP implementation in IPTel SIP Express Router 0.8.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages.

The SIP implementation in multiple dynamicsoft products, including demo products for AppEngine, allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages.

The SIP implementation in multiple Cisco products, including IP Phone models 7940 and 7960 and IOS versions in the 12.2 train, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages.

The Xserver for HP-UX 11.22 was not properly built, which introduced a vulnerability that allows local users to gain privileges.

Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privileges via a long -l option.

The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, making it easier for remote attackers to gain privileges via brute force password guessing attacks.