CVE-2003-1144

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013231.html
http://secunia.com/advisories/10136Patch, Vendor Advisory
http://securitytracker.com/id?1008093Exploit, Vendor Advisory
http://www.osvdb.org/2766Patch, Vendor Advisory
http://www.securityfocus.com/archive/1/343322Exploit, Vendor Advisory
http://www.securityfocus.com/bid/8971Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13599
http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013231.html
http://secunia.com/advisories/10136Patch, Vendor Advisory
http://securitytracker.com/id?1008093Exploit, Vendor Advisory
http://www.osvdb.org/2766Patch, Vendor Advisory
http://www.securityfocus.com/archive/1/343322Exploit, Vendor Advisory
http://www.securityfocus.com/bid/8971Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13599

Timeline

Published: Nov 4, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-11456.8Cross-site scripting (XSS) vulnerability in friendmail.php in OpenAutoClassifieds 1.0 allows remote attackers to inject arbitrary web script CVE-2003-11466.8Cross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbitrary web script or H CVE-2003-11487.5Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.CVE-2003-11494.3Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web CVE-2003-11507.5Buffer overflow in the portmapper service (PMAP.NLM) in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote a CVE-2003-11514.3Cross-site scripting (XSS) vulnerability in Fastream NETFile Server 6.0.3.588 allows remote attackers to inject arbitrary web script or HTML CVE-2003-11525.0WebTide 7.04 allows remote attackers to list arbitrary directories via an HTTP request for %3f.jsp (encoded "?").CVE-2003-11535.0byteHoard 0.7 and 0.71 allows remote attackers to list arbitrary files and directories via a direct request to files.inc.php.CVE-2003-11547.5MAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message with a malformed zip attachment, as exploited CVE-2003-11554.6X-CD-Roast 0.98 alpha10 through alpha14 allows local users to overwrite arbitrary files via a symlink attack on an unknown file.CVE-2003-11564.6Java Runtime Environment (JRE) and Software Development Kit (SDK) 1.4.2 through 1.4.2_02 allows local users to overwrite arbitrary files via CVE-2003-11574.3Cross-site scripting (XSS) vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inject arbitrary web scri