CVE-2003-1032

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink, allows remote attackers to cause a denial of service (crash) via a malformed URL to the web server, possibly involving a buffer overflow.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=105465813729100&w=2
http://marc.info/?l=bugtraq&m=105484265218325&w=2
http://securitytracker.com/id?1006913
http://www.securityfocus.com/bid/7787Exploit, Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=105465813729100&w=2
http://marc.info/?l=bugtraq&m=105484265218325&w=2
http://securitytracker.com/id?1006913
http://www.securityfocus.com/bid/7787Exploit, Patch, Vendor Advisory

Timeline

Published: Feb 17, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-10337.2The (1) instdbmsrv and (2) instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT environment variable as a p CVE-2003-10344.6The RPM installation of SAP DB 7.x creates the (1) dbmsrv or (2) lserver programs with world-writable permissions, which allows local users CVE-2003-10357.5The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to co CVE-2003-10367.5Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code CVE-2003-10377.5Format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS) allows remote attackers to execute arbitrary co CVE-2003-10385.0The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command paramet CVE-2003-10397.5Multiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute arbitrary code via a long HTTP Host header CVE-2003-10402.1kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service (crash) by sen CVE-2003-10417.5Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL co CVE-2003-104210.0SQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and earlier allows remote authenticated users with editproducts privilege CVE-2003-104310.0SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords p CVE-2003-10447.5editproducts.cgi in Bugzilla 2.16.3 and earlier, when usebuggroups is enabled, does not properly remove group add privileges from a group th