# CVEs published 2003-01-29

4 CVEs were published on January 29, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0037](https://cve.now/CVE-2003-0037.md): Buffer overflows in noffle news server 1.0.1 and earlier allow remote attackers to cause a denial of service (segmentation fault) and possib (no CVSS)
- [CVE-2003-0038](https://cve.now/CVE-2003-0038.md): Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via t (no CVSS, mailman)
- [CVE-2003-0042](https://cve.now/CVE-2003-0042.md): Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or ot (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2003-0044](https://cve.now/CVE-2003-0044.md): Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a (no CVSS, org.apache.tomcat:tomcat)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-01-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.