CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
6890 | CVE-2003-0061 | Candidate | Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable. | Assigned (20030203) | None (candidate not yet proposed) | View | |
6889 | CVE-2003-0060 | Candidate | Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in Kerberos principal names. | Modified (20040818) | ACCEPT(2) Baker, Green | MODIFY(2) Cox, Frech | NOOP(2) Cole, Wall | Cox> This is actually fixed in krb5 version 1.2.4 not 1.2.5 | Frech> XF:kerberos-kdc-format-string(11189) | View |
6888 | CVE-2003-0059 | Entry | Unknown vulnerability in the chk_trans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate users in other realms that have the same inter-realm keys. | View | |||
6887 | CVE-2003-0058 | Entry | MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference. | View | |||
6886 | CVE-2003-0057 | Candidate | Multiple buffer overflows in Hypermail 2 before 2.1.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code (1) via a long attachment filename that is not properly handled by the hypermail executable, or (2) by connecting to the mail CGI program from an IP address that reverse-resolves to a long hostname. | Modified (20071113) | ACCEPT(3) Baker, Cole, Green | NOOP(3) Christey, Cox, Wall | Christey> BID:6689 | BID:6690 | DEBIAN:DSA-248 | SUSE:SuSE-SA:2003:012 | View |
Page 19566 of 20943, showing 5 records out of 104715 total, starting on record 97826, ending on 97830