CVEs published October 25, 2003
13 CVEs were published on October 25, 2003: 0 critical, 0 high.
- Published
- 13
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 13
- CVE-2001-1411Format string vulnerability in gm4 (aka m4) on Mac OS X may allow local users to gain privileges if gm4 is called by setuid programs.
- CVE-2001-1412nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the password file by specifying passwd as a command li
- CVE-2002-1569gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for
- CVE-2003-0850The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary
- CVE-2003-0852Format string vulnerability in send_message.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP servers to cause a denial of service
- CVE-2003-0853An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary cod
- CVE-2003-0854ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely
- CVE-2003-0872Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink atta
- CVE-2003-0874Multiple SQL injection vulnerabilities in DeskPRO 1.1.0 and earlier allow remote attackers to insert arbitrary SQL and conduct unauthorized
- CVE-2003-0875Symbolic link vulnerability in the slpd script slpd.all_init for OpenSLP before 1.0.11 allows local users to overwrite arbitrary files via t
- CVE-2003-0894Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execut
- CVE-2003-0896The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier all
- CVE-2003-0897"Shatter" vulnerability in CommCtl32.dll in Windows XP may allow local users to execute arbitrary code by sending (1) BCM_GETTEXTMARGIN or (