CVE List

Id CVE No. Status Description Phase Votes Comments Actions
6890  CVE-2003-0061  Candidate  Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable.  Assigned (20030203)  None (candidate not yet proposed)    View
6889  CVE-2003-0060  Candidate  Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in Kerberos principal names.  Modified (20040818)  ACCEPT(2) Baker, Green | MODIFY(2) Cox, Frech | NOOP(2) Cole, Wall  Cox> This is actually fixed in krb5 version 1.2.4 not 1.2.5 | Frech> XF:kerberos-kdc-format-string(11189)  View
6888  CVE-2003-0059  Entry  Unknown vulnerability in the chk_trans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate users in other realms that have the same inter-realm keys.        View
6887  CVE-2003-0058  Entry  MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference.        View
6886  CVE-2003-0057  Candidate  Multiple buffer overflows in Hypermail 2 before 2.1.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code (1) via a long attachment filename that is not properly handled by the hypermail executable, or (2) by connecting to the mail CGI program from an IP address that reverse-resolves to a long hostname.  Modified (20071113)  ACCEPT(3) Baker, Cole, Green | NOOP(3) Christey, Cox, Wall  Christey> BID:6689 | BID:6690 | DEBIAN:DSA-248 | SUSE:SuSE-SA:2003:012  View

Page 19566 of 20943, showing 5 records out of 104715 total, starting on record 97826, ending on 97830

Actions