| Max CVSS | 5.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2003-0459 | 5.0 |
KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites.
|
11-10-2017 - 01:29 | 27-08-2003 - 04:00 | |
| CVE-2003-0549 | 5.0 |
The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) via a short authorization key name.
|
11-10-2017 - 01:29 | 27-08-2003 - 04:00 | |
| CVE-2003-0547 | 2.1 |
GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file.
|
11-10-2017 - 01:29 | 27-08-2003 - 04:00 | |
| CVE-2003-0548 | 5.0 |
The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) when a chosen host expires, a different issue than CVE-2003-0549.
|
11-10-2017 - 01:29 | 27-08-2003 - 04:00 | |
| CVE-2003-0539 | 4.6 |
skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files.
|
11-10-2017 - 01:29 | 18-08-2003 - 04:00 | |
| CVE-2003-0282 | 2.6 |
Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence.
|
11-10-2017 - 01:29 | 16-06-2003 - 04:00 |