CVE List

Id CVE No. Status Description Phase Votes Comments Actions
6906  CVE-2003-0077  Entry  The hanterm (hanterm-xf) terminal emulator 2.0.5 and earlier, and possibly later versions, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user"s terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.        View
6907  CVE-2003-0078  Entry  ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an information leak (timing discrepancy) that may make it easier to launch cryptographic attacks that rely on distinguishing between padding and MAC verification errors, possibly leading to extraction of the original plaintext, aka the "Vaudenay timing attack."        View
6908  CVE-2003-0079  Entry  The DEC UDK processing feature in the hanterm (hanterm-xf) terminal emulator before 2.0.5 allows attackers to cause a denial of service via a certain character escape sequence that causes the terminal to enter a tight loop.        View
6909  CVE-2003-0080  Candidate  The iptables ruleset in Gnome-lokkit in Red Hat Linux 8.0 does not include any rules in the FORWARD chain, which could allow attackers to bypass intended access restrictions if packet forwarding is enabled.  Assigned (20030210)  None (candidate not yet proposed)    View
6910  CVE-2003-0081  Entry  Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers.        View

Page 1382 of 20943, showing 5 records out of 104715 total, starting on record 6906, ending on 6910

<<first 1378 | 1379 | 1380 | 1381 | 1382 | 1383 | 1384 | 1385 | 1386 last>>

Actions