# CVEs published 2003-06-28

31 CVEs were published on June 28, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0251](https://cve.now/CVE-2003-0251.md): ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the serv (no CVSS)
- [CVE-2003-0348](https://cve.now/CVE-2003-0348.md): A certain Microsoft Windows Media Player 9 Series ActiveX control allows remote attackers to view and manipulate the Media Library on the lo (no CVSS)
- [CVE-2003-0349](https://cve.now/CVE-2003-0349.md): Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows (no CVSS)
- [CVE-2003-0438](https://cve.now/CVE-2003-0438.md): eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on (no CVSS)
- [CVE-2003-0469](https://cve.now/CVE-2003-0469.md): Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2003-0470](https://cve.now/CVE-2003-0470.md): Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the Symantec Security Che (no CVSS)
- [CVE-2003-0471](https://cve.now/CVE-2003-0471.md): Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a lo (no CVSS)
- [CVE-2003-0472](https://cve.now/CVE-2003-0472.md): The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service (hang) in inetd via port scanning. (no CVSS)
- [CVE-2003-0473](https://cve.now/CVE-2003-0473.md): Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications. (no CVSS)
- [CVE-2003-0474](https://cve.now/CVE-2003-0474.md): Directory traversal vulnerability in iWeb Server allows remote attackers to read arbitrary files via an HTTP request containing .. (no CVSS)
- [CVE-2003-0475](https://cve.now/CVE-2003-0475.md): Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request containing URL-encode (no CVSS)
- [CVE-2003-0476](https://cve.now/CVE-2003-0476.md): The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which (no CVSS)
- [CVE-2003-0477](https://cve.now/CVE-2003-0477.md): wzdftpd 0.1rc4 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command without an argument. (no CVSS)
- [CVE-2003-0478](https://cve.now/CVE-2003-0478.md): Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) (no CVSS)
- [CVE-2003-0479](https://cve.now/CVE-2003-0479.md): Cross-site scripting (XSS) vulnerability in the guestbook for WebBBS allows remote attackers to insert arbitrary web script via the (1) Name (no CVSS)
- [CVE-2003-0480](https://cve.now/CVE-2003-0480.md): VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipulation." (no CVSS)
- [CVE-2003-0481](https://cve.now/CVE-2003-0481.md): Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated usin (no CVSS)
- [CVE-2003-0482](https://cve.now/CVE-2003-0482.md): TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file\_new.php, then directly accessing the uploaded c (no CVSS)
- [CVE-2003-0483](https://cve.now/CVE-2003-0483.md): Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via (1) the member p (no CVSS)
- [CVE-2003-0484](https://cve.now/CVE-2003-0484.md): Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the topic\_id (no CVSS)
- [CVE-2003-0485](https://cve.now/CVE-2003-0485.md): Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, in (no CVSS)
- [CVE-2003-0486](https://cve.now/CVE-2003-0486.md): SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic\_id p (no CVSS)
- [CVE-2003-0487](https://cve.now/CVE-2003-0487.md): Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbit (no CVSS)
- [CVE-2003-0488](https://cve.now/CVE-2003-0488.md): Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1) (no CVSS)
- [CVE-2003-0489](https://cve.now/CVE-2003-0489.md): tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local (no CVSS)
- [CVE-2003-0490](https://cve.now/CVE-2003-0490.md): The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical directories and files w (no CVSS)
- [CVE-2003-0491](https://cve.now/CVE-2003-0491.md): The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image (no CVSS)
- [CVE-2003-0492](https://cve.now/CVE-2003-0492.md): Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web (no CVSS)
- [CVE-2003-0493](https://cve.now/CVE-2003-0493.md): Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after ob (no CVSS)
- [CVE-2003-0494](https://cve.now/CVE-2003-0494.md): password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direc (no CVSS)
- [CVE-2003-0495](https://cve.now/CVE-2003-0495.md): Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-06-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.