CVE List

Id CVE No. Status Description Phase Votes Comments Actions
7166  CVE-2003-0338  Candidate  Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequences in HTTP GET or POST requests.  Assigned (20030522)  None (candidate not yet proposed)    View
7167  CVE-2003-0339  Candidate  Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HTTP requests.  Assigned (20030522)  None (candidate not yet proposed)    View
7168  CVE-2003-0340  Candidate  Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, which allows attackers to steal login names and passwords to gain privileges.  Assigned (20030522)  None (candidate not yet proposed)    View
7169  CVE-2003-0341  Candidate  Cross-site scripting (XSS) vulnerability in Owl Intranet Engine 0.71 and earlier allows remote attackers to insert arbitrary script via the Search field.  Assigned (20030522)  None (candidate not yet proposed)    View
7170  CVE-2003-0342  Candidate  BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, which can allow local users to gain privileges.  Assigned (20030522)  None (candidate not yet proposed)    View

Page 1434 of 20943, showing 5 records out of 104715 total, starting on record 7166, ending on 7170

Actions