# CVEs published 2003-06-18

15 CVEs were published on June 18, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2001-1409](https://cve.now/CVE-2001-1409.md): dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local users to replace or… (no CVSS)
- [CVE-2003-0359](https://cve.now/CVE-2003-0359.md): nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by… (no CVSS)
- [CVE-2003-0366](https://cve.now/CVE-2003-0366.md): lyskom-server 2.0.7 and earlier allows unauthenticated users to cause a denial of service (CPU consumption) via a large query. (no CVSS)
- [CVE-2003-0379](https://cve.now/CVE-2003-0379.md): Unknown vulnerability in Apple File Service (AFP Server) for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows… (no CVSS)
- [CVE-2003-0388](https://cve.now/CVE-2003-0388.md): pam\_wheel in Linux-PAM 0.78, with the trust option enabled and the use\_uid option disabled, allows local users to spoof log entries and… (no CVSS)
- [CVE-2003-0418](https://cve.now/CVE-2003-0418.md): The Linux 2.0 kernel IP stack does not properly calculate the size of an ICMP citation, which causes it to include portions of… (no CVSS)
- [CVE-2003-0419](https://cve.now/CVE-2003-0419.md): SMC Networks Barricade Wireless Cable/DSL Broadband Router SMC7004VWBR allows remote attackers to cause a denial of service via certain… (no CVSS)
- [CVE-2003-0428](https://cve.now/CVE-2003-0428.md): Unknown vulnerability in the DCERPC (DCE/RPC) dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2003-0429](https://cve.now/CVE-2003-0429.md): The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code… (no CVSS)
- [CVE-2003-0430](https://cve.now/CVE-2003-0430.md): The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (crash) via an invalid ASN.1 value. (no CVSS)
- [CVE-2003-0431](https://cve.now/CVE-2003-0431.md): The tvb\_get\_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences. (no CVSS)
- [CVE-2003-0432](https://cve.now/CVE-2003-0432.md): Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4)… (no CVSS)
- [CVE-2003-0433](https://cve.now/CVE-2003-0433.md): Multiple buffer overflows in gnocatan 0.6.1 and earlier allow attackers to execute arbitrary code. (no CVSS)
- [CVE-2003-0434](https://cve.now/CVE-2003-0434.md): Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell… (no CVSS)
- [CVE-2003-0435](https://cve.now/CVE-2003-0435.md): Buffer overflow in net\_swapscore for typespeed 0.4.1 and earlier allows remote attackers to execute arbitrary code. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2003-06-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.