# CVEs published 2003-05-17

16 CVEs were published on May 17, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0188](https://cve.now/CVE-2003-0188.md): lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing (no CVSS)
- [CVE-2003-0194](https://cve.now/CVE-2003-0194.md): tcpdump does not properly drop privileges to the pcap user when starting up. (no CVSS)
- [CVE-2003-0242](https://cve.now/CVE-2003-0242.md): IPSec in Mac OS X before 10.2.6 does not properly handle certain incoming security policies that match by port, which could allow traffic th (no CVSS)
- [CVE-2003-0303](https://cve.now/CVE-2003-0303.md): SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descri (no CVSS)
- [CVE-2003-0304](https://cve.now/CVE-2003-0304.md): one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php He (no CVSS)
- [CVE-2003-0305](https://cve.now/CVE-2003-0305.md): The Service Assurance Agent (SAA) in Cisco IOS 12.0 through 12.2, aka Response Time Reporter (RTR), allows remote attackers to cause a denia (no CVSS)
- [CVE-2003-0306](https://cve.now/CVE-2003-0306.md): Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.ini file with a long . (no CVSS)
- [CVE-2003-0307](https://cve.now/CVE-2003-0307.md): Poster version.two allows remote authenticated users to gain administrative privileges by appending the "|" field separator and an "admin" v (no CVSS)
- [CVE-2003-0308](https://cve.now/CVE-2003-0308.md): The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain addition (no CVSS)
- [CVE-2003-0309](https://cve.now/CVE-2003-0309.md): Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web d (no CVSS)
- [CVE-2003-0310](https://cve.now/CVE-2003-0310.md): Cross-site scripting (XSS) vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script. (no CVSS)
- [CVE-2003-0312](https://cve.now/CVE-2003-0312.md): Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2003-0313](https://cve.now/CVE-2003-0313.md): Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to list arbitrary directory contents via a ... (no CVSS)
- [CVE-2003-0314](https://cve.now/CVE-2003-0314.md): Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) via a URL that ends in a "\</" sequence. (no CVSS)
- [CVE-2003-0315](https://cve.now/CVE-2003-0315.md): Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP re (no CVSS)
- [CVE-2003-0316](https://cve.now/CVE-2003-0316.md): Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for various protocols, in (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-05-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.