# CVEs published 2003-04-26

14 CVEs were published on April 26, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2002-1562](https://cve.now/CVE-2002-1562.md): Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. (no CVSS)
- [CVE-2002-1563](https://cve.now/CVE-2002-1563.md): stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditions that cause an inc (no CVSS)
- [CVE-2003-0112](https://cve.now/CVE-2003-0112.md): Buffer overflow in Windows Kernel allows local users to gain privileges by causing certain error messages to be passed to a debugger. (no CVSS)
- [CVE-2003-0113](https://cve.now/CVE-2003-0113.md): Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP (no CVSS)
- [CVE-2003-0114](https://cve.now/CVE-2003-0114.md): The file upload control in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to automatically upload files from the loc (no CVSS)
- [CVE-2003-0116](https://cve.now/CVE-2003-0116.md): Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check the Cascading Style Sheet input parameter for Modal dialogs, which all (no CVSS)
- [CVE-2003-0205](https://cve.now/CVE-2003-0205.md): gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticke (no CVSS)
- [CVE-2003-0206](https://cve.now/CVE-2003-0206.md): gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to cause a denial of service (crash) via (1) link or (2) title elem (no CVSS)
- [CVE-2003-0210](https://cve.now/CVE-2003-0210.md): Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2003-0212](https://cve.now/CVE-2003-0212.md): handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes full and sets an array index incorrectly, wh (no CVSS)
- [CVE-2003-0213](https://cve.now/CVE-2003-0213.md): ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which (no CVSS)
- [CVE-2003-0214](https://cve.now/CVE-2003-0214.md): run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files. (no CVSS)
- [CVE-2003-0215](https://cve.now/CVE-2003-0215.md): SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via the (1) username and (no CVSS)
- [CVE-2003-0216](https://cve.now/CVE-2003-0216.md): Unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to the enable mode without a pass (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-04-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.