CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
6946 | CVE-2003-0117 | Candidate | Buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver. | Assigned (20030226) | None (candidate not yet proposed) | View | |
6947 | CVE-2003-0118 | Candidate | SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to (1) rawdocdata.asp or (2) RawCustomSearchField.asp containing an embedded SQL statement. | Assigned (20030226) | None (candidate not yet proposed) | View | |
6948 | CVE-2003-0119 | Candidate | The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attackers to directly connect to the daemon and conduct unauthorized activities. | Assigned (20030228) | None (candidate not yet proposed) | View | |
6950 | CVE-2003-0121 | Candidate | Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not specify a MIME-Version header field, which is processed by some mail clients. | Assigned (20030303) | None (candidate not yet proposed) | View | |
6956 | CVE-2003-0127 | Candidate | The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel. | Assigned (20030313) | None (candidate not yet proposed) | View |
Page 640 of 20943, showing 5 records out of 104715 total, starting on record 3196, ending on 3200