# CVEs published 2003-06-11

21 CVEs were published on June 11, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0397](https://cve.now/CVE-2003-0397.md): Buffer overflow in FastTrack (FT) network code, as used in Kazaa 2.0.2 and possibly other versions and products, allows remote attackers to (no CVSS)
- [CVE-2003-0398](https://cve.now/CVE-2003-0398.md): Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, with the SSI EXEC feature enabled, allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2003-0399](https://cve.now/CVE-2003-0399.md): Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by se (no CVSS)
- [CVE-2003-0400](https://cve.now/CVE-2003-0400.md): Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to return unauthorized p (no CVSS)
- [CVE-2003-0401](https://cve.now/CVE-2003-0401.md): Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn/style template. (no CVSS)
- [CVE-2003-0402](https://cve.now/CVE-2003-0402.md): The default login template (/vgn/login) in Vignette StoryServer 5 and Vignette V/5 generates different responses whether a user exists or no (no CVSS)
- [CVE-2003-0403](https://cve.now/CVE-2003-0403.md): Vignette StoryServer 5 and Vignette V/5 allows remote attackers to read and modify license information, and cause a denial of service (servi (no CVSS)
- [CVE-2003-0404](https://cve.now/CVE-2003-0404.md): Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to ins (no CVSS)
- [CVE-2003-0405](https://cve.now/CVE-2003-0405.md): Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or cookie which is proce (no CVSS)
- [CVE-2003-0406](https://cve.now/CVE-2003-0406.md): PalmVNC 1.40 and earlier stores passwords in plaintext in the PalmVNCDB, which is backed up to PCs that the Palm is synchronized with, which (no CVSS)
- [CVE-2003-0407](https://cve.now/CVE-2003-0407.md): Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string. (no CVSS)
- [CVE-2003-0408](https://cve.now/CVE-2003-0408.md): Buffer overflow in Uptime Client (UpClient) 5.0b7, and possibly other versions, allows local users to gain privileges via a long -p argument (no CVSS)
- [CVE-2003-0409](https://cve.now/CVE-2003-0409.md): Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrar (no CVSS)
- [CVE-2003-0410](https://cve.now/CVE-2003-0410.md): Buffer overflow in AnalogX Proxy 4.13 allows remote attackers to execute arbitrary code via a long URL to port 6588. (no CVSS)
- [CVE-2003-0411](https://cve.now/CVE-2003-0411.md): Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase " (no CVSS)
- [CVE-2003-0412](https://cve.now/CVE-2003-0412.md): Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could allow remote attackers (no CVSS)
- [CVE-2003-0413](https://cve.now/CVE-2003-0413.md): Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0 for Windows 2000/XP (no CVSS)
- [CVE-2003-0414](https://cve.now/CVE-2003-0414.md): The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, which allows loc (no CVSS)
- [CVE-2003-0415](https://cve.now/CVE-2003-0415.md): Remote PC Access Server 2.2 allows remote attackers to cause a denial of service (crash) by receiving packets from the server and sending th (no CVSS)
- [CVE-2003-0416](https://cve.now/CVE-2003-0416.md): Cross-site scripting (XSS) vulnerability in index.cgi for Bandmin 1.4 allows remote attackers to insert arbitrary HTML or script via (1) the (no CVSS)
- [CVE-2003-0417](https://cve.now/CVE-2003-0417.md): Directory traversal vulnerability in Son hServer 0.2 allows remote attackers to read arbitrary files via ".|." (modified dot-dot) sequences. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-06-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.