# CVEs published 2003-06-20

11 CVEs were published on June 20, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0381](https://cve.now/CVE-2003-0381.md): Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files (no CVSS)
- [CVE-2003-0389](https://cve.now/CVE-2003-0389.md): Cross-site scripting (XSS) vulnerability in the secure redirect function of RSA ACE/Agent 5.0 for Windows, and 5.x for Web, allows remote at (no CVSS)
- [CVE-2003-0427](https://cve.now/CVE-2003-0427.md): Buffer overflow in mikmod 3.1.6 and earlier allows remote attackers to execute arbitrary code via an archive file that contains a file with (no CVSS)
- [CVE-2003-0436](https://cve.now/CVE-2003-0436.md): Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul parameter. (no CVSS)
- [CVE-2003-0437](https://cve.now/CVE-2003-0437.md): Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt parameter. (no CVSS)
- [CVE-2003-0442](https://cve.now/CVE-2003-0442.md): Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use\_trans\_sid) allows remot (no CVSS)
- [CVE-2003-0446](https://cve.now/CVE-2003-0446.md): Cross-site scripting (XSS) in Internet Explorer 5.5 and 6.0, possibly in a component that is also used by other Microsoft products, allows r (no CVSS)
- [CVE-2003-0447](https://cve.now/CVE-2003-0447.md): The Custom HTTP Errors capability in Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute script in the Local Zone via an (no CVSS)
- [CVE-2003-0448](https://cve.now/CVE-2003-0448.md): Portmon 1.7 and possibly earlier versions allows local users to read and write arbitrary files via the (1) -c (host file) or (2) -l (log fil (no CVSS)
- [CVE-2003-0449](https://cve.now/CVE-2003-0449.md): Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to gain privileges via ( (no CVSS)
- [CVE-2003-0450](https://cve.now/CVE-2003-0450.md): Cistron RADIUS daemon (radiusd-cistron) 1.6.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrar (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-06-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.