CVE-2003-1053

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Multiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long (1) -KCONV command line option or (2) XSHISENLIB environment variable.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=213957Patch, Vendor Advisory
http://secunia.com/advisories/9950Vendor Advisory
http://www.securityfocus.com/bid/8770Patch, Vendor Advisory
http://www.securityfocus.com/bid/8776Patch, Vendor Advisory
http://www.vuxml.org/freebsd/56971fa6-641c-11d9-a097-000854d03344.htmlVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13358
https://exchange.xforce.ibmcloud.com/vulnerabilities/13359
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=213957Patch, Vendor Advisory
http://secunia.com/advisories/9950Vendor Advisory
http://www.securityfocus.com/bid/8770Patch, Vendor Advisory
http://www.securityfocus.com/bid/8776Patch, Vendor Advisory
http://www.vuxml.org/freebsd/56971fa6-641c-11d9-a097-000854d03344.htmlVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13358
https://exchange.xforce.ibmcloud.com/vulnerabilities/13359

Timeline

Published: Oct 3, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-10545.0mod_access_referer 1.0.2 allows remote attackers to cause a denial of service (crash) via a malformed Referer header that is missing a hostn CVE-2003-10557.2Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDA CVE-2003-10567.2The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary file CVE-2003-10577.2Unknown vulnerability in CDE Print Viewer (dtprintinfo) for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code.CVE-2003-10583.7The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of se CVE-2003-10597.2Unknown vulnerability in the libraries for the PGX32 frame buffer in Solaris 2.5.1 and 2.6 through 9 allows local users to gain root access.CVE-2003-10605.0The NFS Server for Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (UFS panic) via certain invalid UFS requests, wh CVE-2003-10611.2Race condition in Solaris 2.6 through 9 allows local users to cause a denial of service (kernel panic), as demonstrated via the namefs funct CVE-2003-10624.6Unknown vulnerability in the sysinfo system call for Solaris for SPARC 2.6 through 9, and Solaris for x86 2.6, 7, and 8, allows local users CVE-2003-10637.5The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, w CVE-2003-10645.0Solaris 8 with IPv6 enabled allows remote attackers to cause a denial of service (kernel panic) via a crafted IPv6 packet.CVE-2003-10652.1Unknown vulnerability in patches 108993-14 through 108993-19 and 108994-14 through 108994-19 for Solaris 8 may allow local users to cause a