# CVEs published 2003-11-18

20 CVEs were published on November 18, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0089](https://cve.now/CVE-2003-0089.md): Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a… (no CVSS)
- [CVE-2003-0628](https://cve.now/CVE-2003-0628.md): PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the… (no CVSS)
- [CVE-2003-0629](https://cve.now/CVE-2003-0629.md): Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to… (no CVSS)
- [CVE-2003-0795](https://cve.now/CVE-2003-0795.md): The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing… (no CVSS)
- [CVE-2003-0812](https://cve.now/CVE-2003-0812.md): Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute… (no CVSS)
- [CVE-2003-0820](https://cve.now/CVE-2003-0820.md): Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro… (no CVSS)
- [CVE-2003-0821](https://cve.now/CVE-2003-0821.md): Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4)… (no CVSS)
- [CVE-2003-0822](https://cve.now/CVE-2003-0822.md): Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote… (no CVSS)
- [CVE-2003-0824](https://cve.now/CVE-2003-0824.md): Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft… (no CVSS)
- [CVE-2003-0856](https://cve.now/CVE-2003-0856.md): iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as other users to the kernel netlink… (no CVSS)
- [CVE-2003-0858](https://cve.now/CVE-2003-0858.md): Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other… (no CVSS)
- [CVE-2003-0859](https://cve.now/CVE-2003-0859.md): The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages… (no CVSS)
- [CVE-2003-0932](https://cve.now/CVE-2003-0932.md): Buffer overflow in omega-rpg 0.90 allows local users to execute arbitrary code via a long (1) command line or (2) environment variable. (no CVSS)
- [CVE-2003-0936](https://cve.now/CVE-2003-0936.md): Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help interface using… (no CVSS)
- [CVE-2003-0937](https://cve.now/CVE-2003-0937.md): SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID… (no CVSS)
- [CVE-2003-0946](https://cve.now/CVE-2003-0946.md): Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, allows remote… (no CVSS)
- [CVE-2003-0947](https://cve.now/CVE-2003-0947.md): Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable. (no CVSS)
- [CVE-2003-0948](https://cve.now/CVE-2003-0948.md): Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable. (no CVSS)
- [CVE-2003-0950](https://cve.now/CVE-2003-0950.md): PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient… (no CVSS)
- [CVE-2003-0951](https://cve.now/CVE-2003-0951.md): Partition Manager (parmgr) in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2003-11-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.