Show filters
250 Total Results
Displaying 241-250 of 250
Sort by:
Attacker Value
Unknown
CVE-2003-0894
Disclosure Date: November 17, 2003 (last updated February 22, 2025)
Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execute arbitrary code via a long command line argument.
0
Attacker Value
Unknown
CVE-2003-0661
Disclosure Date: October 20, 2003 (last updated February 22, 2025)
The NetBT Name Service (NBNS) for NetBIOS in Windows NT 4.0, 2000, XP, and Server 2003 may include random memory in a response to a NBNS query, which could allow remote attackers to obtain sensitive information.
0
Attacker Value
Unknown
CVE-2003-0528
Disclosure Date: September 17, 2003 (last updated February 22, 2025)
Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0715.
0
Attacker Value
Unknown
CVE-2003-0715
Disclosure Date: September 17, 2003 (last updated February 22, 2025)
Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0528.
0
Attacker Value
Unknown
CVE-2003-0634
Disclosure Date: August 27, 2003 (last updated February 22, 2025)
Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database users in some cases, to execute arbitrary code via a long library name.
0
Attacker Value
Unknown
CVE-2003-0352
Disclosure Date: August 18, 2003 (last updated February 22, 2025)
Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.
0
Attacker Value
Unknown
CVE-2002-1542
Disclosure Date: March 31, 2003 (last updated February 22, 2025)
SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow.
0
Attacker Value
Unknown
CVE-2002-1209
Disclosure Date: November 04, 2002 (last updated February 22, 2025)
Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request.
0
Attacker Value
Unknown
CVE-2002-0897
Disclosure Date: October 04, 2002 (last updated February 22, 2025)
LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory.
0
Attacker Value
Unknown
CVE-2002-0098
Disclosure Date: March 25, 2002 (last updated February 22, 2025)
Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner.
0
