CVE List

Id CVE No. Status Description Phase Votes Comments Actions
7516  CVE-2003-0692  Candidate  KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session.  Assigned (20030814)  None (candidate not yet proposed)    View
7517  CVE-2003-0693  Candidate  A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.  Assigned (20030814)  None (candidate not yet proposed)    View
7518  CVE-2003-0694  Candidate  The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.  Assigned (20030814)  None (candidate not yet proposed)    View
7519  CVE-2003-0695  Candidate  Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffer_free in buffer.c, or (3) a separate function in channels.c, a different vulnerability than CVE-2003-0693.  Assigned (20030814)  None (candidate not yet proposed)    View
7520  CVE-2003-0696  Candidate  The getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows attackers to cause a denial of service (resource exhaustion).  Assigned (20030814)  None (candidate not yet proposed)    View

Page 20193 of 20943, showing 5 records out of 104715 total, starting on record 100961, ending on 100965

Actions