# CVEs published 2003-08-01

15 CVEs were published on August 1, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0148](https://cve.now/CVE-2003-0148.md): The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series… (no CVSS)
- [CVE-2003-0149](https://cve.now/CVE-2003-0149.md): Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2003-0459](https://cve.now/CVE-2003-0459.md): KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the… (no CVSS)
- [CVE-2003-0466](https://cve.now/CVE-2003-0466.md): Off-by-one error in the fb\_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary… (no CVSS)
- [CVE-2003-0575](https://cve.now/CVE-2003-0575.md): Heap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows… (no CVSS)
- [CVE-2003-0606](https://cve.now/CVE-2003-0606.md): sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files. (no CVSS)
- [CVE-2003-0609](https://cve.now/CVE-2003-0609.md): Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long… (no CVSS)
- [CVE-2003-0610](https://cve.now/CVE-2003-0610.md): Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a… (no CVSS)
- [CVE-2003-0611](https://cve.now/CVE-2003-0611.md): Multiple buffer overflows in xtokkaetama 1.0 allow local users to gain privileges via a long (1) -display command line argument or (2)… (no CVSS)
- [CVE-2003-0614](https://cve.now/CVE-2003-0614.md): Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script… (no CVSS)
- [CVE-2003-0615](https://cve.now/CVE-2003-0615.md): Cross-site scripting (XSS) vulnerability in start\_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into… (no CVSS)
- [CVE-2003-0616](https://cve.now/CVE-2003-0616.md): Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute… (no CVSS)
- [CVE-2003-0619](https://cve.now/CVE-2003-0619.md): Integer signedness error in the decode\_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2003-0620](https://cve.now/CVE-2003-0620.md): Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via (1)… (no CVSS)
- [CVE-2003-0625](https://cve.now/CVE-2003-0625.md): Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2003-08-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.