# CVEs published 2003-05-30

17 CVEs were published on May 30, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2002-1564](https://cve.now/CVE-2002-1564.md): Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains scr (no CVSS)
- [CVE-2003-0189](https://cve.now/CVE-2003-0189.md): The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt\_r or crypt f (no CVSS)
- [CVE-2003-0223](https://cve.now/CVE-2003-0223.md): Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in Microsoft Internet Information Server (IIS) 4.0, (no CVSS)
- [CVE-2003-0224](https://cve.now/CVE-2003-0224.md): Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web pa (no CVSS)
- [CVE-2003-0225](https://cve.now/CVE-2003-0225.md): The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when construct (no CVSS)
- [CVE-2003-0226](https://cve.now/CVE-2003-0226.md): Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request wit (no CVSS)
- [CVE-2003-0227](https://cve.now/CVE-2003-0227.md): The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Wind (no CVSS)
- [CVE-2003-0240](https://cve.now/CVE-2003-0240.md): The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and m (no CVSS)
- [CVE-2003-0241](https://cve.now/CVE-2003-0241.md): FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or ot (no CVSS)
- [CVE-2003-0245](https://cve.now/CVE-2003-0245.md): Vulnerability in the apr\_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attac (no CVSS)
- [CVE-2003-0355](https://cve.now/CVE-2003-0355.md): Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers (no CVSS)
- [CVE-2003-0356](https://cve.now/CVE-2003-0356.md): Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute (no CVSS)
- [CVE-2003-0357](https://cve.now/CVE-2003-0357.md): Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly ex (no CVSS)
- [CVE-2003-0358](https://cve.now/CVE-2003-0358.md): Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gai (no CVSS)
- [CVE-2003-0360](https://cve.now/CVE-2003-0360.md): Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code. (no CVSS)
- [CVE-2003-0361](https://cve.now/CVE-2003-0361.md): gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could al (no CVSS)
- [CVE-2003-0362](https://cve.now/CVE-2003-0362.md): Buffer overflow in gPS before 0.10.2 may allow local users to cause a denial of service (SIGSEGV) in rgpsp via long command lines. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-05-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.