CVEs published May 17, 2003
16 CVEs were published on May 17, 2003: 0 critical, 0 high.
- Published
- 16
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 16
- CVE-2003-0188lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing
- CVE-2003-0194tcpdump does not properly drop privileges to the pcap user when starting up.
- CVE-2003-0242IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which could allow traffic th
- CVE-2003-0303SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descri
- CVE-2003-0304one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php He
- CVE-2003-0305The Service Assurance Agent (SAA) in Cisco IOS 12.0 through 12.2, aka Response Time Reporter (RTR), allows remote attackers to cause a denia
- CVE-2003-0306Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.ini file with a long .
- CVE-2003-0307Poster version.two allows remote authenticated users to gain administrative privileges by appending the "|" field separator and an "admin" v
- CVE-2003-0308The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain addition
- CVE-2003-0309Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web d
- CVE-2003-0310Cross-site scripting (XSS) vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script.
- CVE-2003-0312Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to read arbitrary files via a ..
- CVE-2003-0313Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to list arbitrary directory contents via a ...
- CVE-2003-0314Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) via a URL that ends in a "</" sequence.
- CVE-2003-0315Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP re
- CVE-2003-0316Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for various protocols, in