# CVEs published 2003-06-28

31 CVEs were published on June 28, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0251](https://cve.now/CVE-2003-0251.md): ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the… (no CVSS)
- [CVE-2003-0348](https://cve.now/CVE-2003-0348.md): A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the… (no CVSS)
- [CVE-2003-0349](https://cve.now/CVE-2003-0349.md): Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft… (no CVSS)
- [CVE-2003-0438](https://cve.now/CVE-2003-0438.md): eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack… (no CVSS)
- [CVE-2003-0469](https://cve.now/CVE-2003-0469.md): Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2003-0470](https://cve.now/CVE-2003-0470.md): Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the Symantec Security… (no CVSS)
- [CVE-2003-0471](https://cve.now/CVE-2003-0471.md): Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a… (no CVSS)
- [CVE-2003-0472](https://cve.now/CVE-2003-0472.md): The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service (hang) in inetd via port scanning. (no CVSS)
- [CVE-2003-0473](https://cve.now/CVE-2003-0473.md): Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications. (no CVSS)
- [CVE-2003-0474](https://cve.now/CVE-2003-0474.md): Directory traversal vulnerability in iWeb Server allows remote attackers to read arbitrary files via an HTTP request containing .. (no CVSS)
- [CVE-2003-0475](https://cve.now/CVE-2003-0475.md): Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request containing… (no CVSS)
- [CVE-2003-0476](https://cve.now/CVE-2003-0476.md): The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process… (no CVSS)
- [CVE-2003-0477](https://cve.now/CVE-2003-0477.md): wzdftpd 0.1rc4 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command without an argument. (no CVSS)
- [CVE-2003-0478](https://cve.now/CVE-2003-0478.md): Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1… (no CVSS)
- [CVE-2003-0479](https://cve.now/CVE-2003-0479.md): Cross-site scripting (XSS) vulnerability in the guestbook for WebBBS allows remote attackers to insert arbitrary web script via the (1)… (no CVSS)
- [CVE-2003-0480](https://cve.now/CVE-2003-0480.md): VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipulation." (no CVSS)
- [CVE-2003-0481](https://cve.now/CVE-2003-0481.md): Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated… (no CVSS)
- [CVE-2003-0482](https://cve.now/CVE-2003-0482.md): TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file\_new.php, then directly accessing the uploaded… (no CVSS)
- [CVE-2003-0483](https://cve.now/CVE-2003-0483.md): Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via (1) the member… (no CVSS)
- [CVE-2003-0484](https://cve.now/CVE-2003-0484.md): Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the… (no CVSS)
- [CVE-2003-0485](https://cve.now/CVE-2003-0485.md): Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long… (no CVSS)
- [CVE-2003-0486](https://cve.now/CVE-2003-0486.md): SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic\_id… (no CVSS)
- [CVE-2003-0487](https://cve.now/CVE-2003-0487.md): Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute… (no CVSS)
- [CVE-2003-0488](https://cve.now/CVE-2003-0488.md): Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via… (no CVSS)
- [CVE-2003-0489](https://cve.now/CVE-2003-0489.md): tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow… (no CVSS)
- [CVE-2003-0490](https://cve.now/CVE-2003-0490.md): The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical directories and files… (no CVSS)
- [CVE-2003-0491](https://cve.now/CVE-2003-0491.md): The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME… (no CVSS)
- [CVE-2003-0492](https://cve.now/CVE-2003-0492.md): Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2003-0493](https://cve.now/CVE-2003-0493.md): Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after… (no CVSS)
- [CVE-2003-0494](https://cve.now/CVE-2003-0494.md): password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a… (no CVSS)
- [CVE-2003-0495](https://cve.now/CVE-2003-0495.md): Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2003-06-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.