# CVEs published 2003-06-10

12 CVEs were published on June 10, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0367](https://cve.now/CVE-2003-0367.md): znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files. (no CVSS)
- [CVE-2003-0380](https://cve.now/CVE-2003-0380.md): Buffer overflow in atftp daemon (atftpd) 0.6.1 and earlier, and possibly later versions, allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2003-0382](https://cve.now/CVE-2003-0382.md): Buffer overflow in Eterm 0.9.2 allows local users to gain privileges via a long ETERMPATH environment variable. (no CVSS)
- [CVE-2003-0385](https://cve.now/CVE-2003-0385.md): Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option. (no CVSS)
- [CVE-2003-0386](https://cve.now/CVE-2003-0386.md): OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attack (no CVSS)
- [CVE-2003-0390](https://cve.now/CVE-2003-0390.md): Multiple buffer overflows in Options Parsing Tool (OPT) shared library 3.18 and earlier, when used in setuid programs, may allow local users (no CVSS)
- [CVE-2003-0391](https://cve.now/CVE-2003-0391.md): Format string vulnerability in Magic WinMail Server 2.3, and possibly other 2.x versions, allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2003-0392](https://cve.now/CVE-2003-0392.md): Directory traversal vulnerability in ST FTP Service 3.0 allows remote attackers to list arbitrary directories via a CD command with a DoS dr (no CVSS)
- [CVE-2003-0393](https://cve.now/CVE-2003-0393.md): Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Internet Traffic" modes, w (no CVSS)
- [CVE-2003-0394](https://cve.now/CVE-2003-0394.md): objects.inc.php4 in BLNews 2.1.3 allows remote attackers to execute arbitrary PHP code via a Server\[path\] parameter that points to malicious (no CVSS)
- [CVE-2003-0395](https://cve.now/CVE-2003-0395.md): Ultimate PHP Board (UPB) 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request con (no CVSS)
- [CVE-2003-0396](https://cve.now/CVE-2003-0396.md): Buffer overflow in les for ATM on Linux (linux-atm) before 2.4.1, if used setuid, allows local users to gain privileges via a long -f comman (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-06-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.