Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2003-12-31 | CVE-2003-1485 | Improper Input Validation vulnerability in Clearswift Mailsweeper Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contains "multiple extensions combined with large blocks of white space." | 5.0 |
| 2003-12-31 | CVE-2003-1484 | Buffer Errors vulnerability in Microsoft IE 6.0 Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) by creating a DHTML link that uses the AnchorClick "A" object with a blank href attribute. | 4.3 |
| 2003-12-31 | CVE-2003-1483 | Cryptographic Issues vulnerability in Flashfxp 1.4 FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access. | 6.4 |
| 2003-12-31 | CVE-2003-1482 | Credentials Management vulnerability in Microsoft Mn-500 Wireless Base Station The backup configuration file for Microsoft MN-500 wireless base station stores administrative passwords in plaintext, which allows local users to gain access. | 4.6 |
| 2003-12-31 | CVE-2003-1481 | Information Exposure vulnerability in Stalker Communigate PRO CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer. | 5.8 |
| 2003-12-31 | CVE-2003-1480 | Cryptographic Issues vulnerability in multiple products MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods. | 4.3 |
| 2003-12-31 | CVE-2003-1479 | Cross-Site Scripting vulnerability in Darkwet Webcam XP 1.02.432/1.02.535 Cross-site scripting (XSS) vulnerability in webcamXP 1.02.432 and 1.02.535 allows remote attackers to inject arbitrary web script or HTML via the message field. | 4.3 |
| 2003-12-31 | CVE-2003-1478 | Buffer Errors vulnerability in KDE Konqueror 3.0.3 Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with a "xFFxFE" byte sequence and a large number of CRLF sequences, as demonstrated using freeze.htm. | 4.3 |
| 2003-12-31 | CVE-2003-1477 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Clearswift Mailsweeper FOR Smtp 4.3.6/4.3.7 MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) via a PowerPoint attachment that either (1) is corrupt or (2) contains "embedded objects." | 7.8 |
| 2003-12-31 | CVE-2003-1476 | Unspecified vulnerability in Cerberus FTP Server 2.1 Cerberus FTP Server 2.1 stores usernames and passwords in plaintext, which could allow local users to gain access. | 2.1 |