Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2003-06-16 CVE-2003-0298 Denial-Of-Service vulnerability in Browser
The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large (1) literal and possibly (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
network
low complexity
mozilla
7.5
2003-06-16 CVE-2003-0297 Unspecified vulnerability in University of Washington C-Client, Imap-2002B and Pine
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
network
low complexity
university-of-washington
7.5
2003-06-16 CVE-2003-0296 Denial-Of-Service vulnerability in Ximian Evolution 1.2.4
The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.
network
low complexity
ximian
7.5
2003-06-16 CVE-2003-0289 Unspecified vulnerability in Cdrtools Cdrecord 1.11/2.0
Format string vulnerability in scsiopen.c of the cdrecord program in cdrtools 2.0 allows local users to gain privileges via format string specifiers in the dev parameter.
local
low complexity
cdrtools
7.2
2003-06-16 CVE-2003-0286 SQL Injection vulnerability in Snitz Communications Snitz Forums 2000
SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.
network
low complexity
snitz-communications CWE-89
7.5
2003-06-16 CVE-2003-0284 Remote Security vulnerability in Adobe Acrobat 5.0
Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the Plug-ins folder that spread to other PDF documents, as demonstrated by the W32.Yourde virus.
network
low complexity
adobe
7.5
2003-06-16 CVE-2003-0270 Unspecified vulnerability in Apple 802.11N 7.3.1
The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet or non-WEP connections.
network
high complexity
apple
7.6
2003-06-16 CVE-2002-1565 Denial-Of-Service vulnerability in Immunix 7
Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long URL.
network
low complexity
immunix
7.5
2003-06-16 CVE-2002-1155 Unspecified vulnerability in Redhat Linux
Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument.
local
low complexity
redhat
7.2
2003-06-09 CVE-2003-0361 Remote Security vulnerability in Linux
gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp.
network
low complexity
debian
7.5