# CVEs published 2003-06-18

15 CVEs were published on June 18, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2001-1409](https://cve.now/CVE-2001-1409.md): dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local users to replace or cr (no CVSS)
- [CVE-2003-0359](https://cve.now/CVE-2003-0359.md): nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replaci (no CVSS)
- [CVE-2003-0366](https://cve.now/CVE-2003-0366.md): lyskom-server 2.0.7 and earlier allows unauthenticated users to cause a denial of service (CPU consumption) via a large query. (no CVSS)
- [CVE-2003-0379](https://cve.now/CVE-2003-0379.md): Unknown vulnerability in Apple File Service (AFP Server) for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows re (no CVSS)
- [CVE-2003-0388](https://cve.now/CVE-2003-0388.md): pam\_wheel in Linux-PAM 0.78, with the trust option enabled and the use\_uid option disabled, allows local users to spoof log entries and gain (no CVSS)
- [CVE-2003-0418](https://cve.now/CVE-2003-0418.md): The Linux 2.0 kernel IP stack does not properly calculate the size of an ICMP citation, which causes it to include portions of unauthorized (no CVSS)
- [CVE-2003-0419](https://cve.now/CVE-2003-0419.md): SMC Networks Barricade Wireless Cable/DSL Broadband Router SMC7004VWBR allows remote attackers to cause a denial of service via certain pack (no CVSS)
- [CVE-2003-0428](https://cve.now/CVE-2003-0428.md): Unknown vulnerability in the DCERPC (DCE/RPC) dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2003-0429](https://cve.now/CVE-2003-0429.md): The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code vi (no CVSS)
- [CVE-2003-0430](https://cve.now/CVE-2003-0430.md): The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (crash) via an invalid ASN.1 value. (no CVSS)
- [CVE-2003-0431](https://cve.now/CVE-2003-0431.md): The tvb\_get\_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences. (no CVSS)
- [CVE-2003-0432](https://cve.now/CVE-2003-0432.md): Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.1 (no CVSS)
- [CVE-2003-0433](https://cve.now/CVE-2003-0433.md): Multiple buffer overflows in gnocatan 0.6.1 and earlier allow attackers to execute arbitrary code. (no CVSS)
- [CVE-2003-0434](https://cve.now/CVE-2003-0434.md): Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metach (no CVSS)
- [CVE-2003-0435](https://cve.now/CVE-2003-0435.md): Buffer overflow in net\_swapscore for typespeed 0.4.1 and earlier allows remote attackers to execute arbitrary code. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-06-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.