# CVEs published 2003-07-10

22 CVEs were published on July 10, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0192](https://cve.now/CVE-2003-0192.md): Apache 2 before 2.0.47, and certain versions of mod\_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotia (no CVSS)
- [CVE-2003-0253](https://cve.now/CVE-2003-0253.md): The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a denial of service. (no CVSS)
- [CVE-2003-0254](https://cve.now/CVE-2003-0254.md): Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service (CPU consumption by infinite loop) when (no CVSS)
- [CVE-2003-0345](https://cve.now/CVE-2003-0345.md): Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possib (no CVSS)
- [CVE-2003-0350](https://cve.now/CVE-2003-0350.md): The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 (ListView) does not properly handle Windo (no CVSS)
- [CVE-2003-0440](https://cve.now/CVE-2003-0440.md): The (1) semi MIME library 1.14.5 and earlier, and (2) wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary fil (no CVSS)
- [CVE-2003-0496](https://cve.now/CVE-2003-0496.md): Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp\_fileexist extend (no CVSS)
- [CVE-2003-0515](https://cve.now/CVE-2003-0515.md): SQL injection vulnerabilities in the (1) PostgreSQL or (2) MySQL authentication modules for teapop 0.3.5 and earlier allow attackers to exec (no CVSS)
- [CVE-2003-0516](https://cve.now/CVE-2003-0516.md): cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute (no CVSS)
- [CVE-2003-0517](https://cve.now/CVE-2003-0517.md): faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files. (no CVSS)
- [CVE-2003-0518](https://cve.now/CVE-2003-0518.md): The screen saver in MacOS X allows users with physical access to cause the screen saver to crash and gain access to the underlying session v (no CVSS)
- [CVE-2003-0519](https://cve.now/CVE-2003-0519.md): Certain versions of Internet Explorer 5 and 6, in certain Windows environments, allow remote attackers to cause a denial of service (freeze) (no CVSS)
- [CVE-2003-0520](https://cve.now/CVE-2003-0520.md): Trillian 1.0 Pro and 0.74 Freeware allows remote attackers to cause a denial of service (crash) via a TypingUser message in which the "Typin (no CVSS)
- [CVE-2003-0521](https://cve.now/CVE-2003-0521.md): Cross-site scripting (XSS) vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administr (no CVSS)
- [CVE-2003-0522](https://cve.now/CVE-2003-0522.md): Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via (no CVSS)
- [CVE-2003-0523](https://cve.now/CVE-2003-0523.md): Cross-site scripting (XSS) vulnerability in msg.asp for certain versions of ProductCart allow remote attackers to execute arbitrary web scri (no CVSS)
- [CVE-2003-0524](https://cve.now/CVE-2003-0524.md): Qt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on the qt\_plugins\_3.0rc temporary file in the (no CVSS)
- [CVE-2003-0535](https://cve.now/CVE-2003-0535.md): Buffer overflow in xbl 1.0k and earlier allows local users to gain privileges via a long -display command line option. (no CVSS)
- [CVE-2003-0536](https://cve.now/CVE-2003-0536.md): Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary fi (no CVSS)
- [CVE-2003-0537](https://cve.now/CVE-2003-0537.md): The liece Emacs IRC client 2.0+0.20030527 and earlier creates temporary files insecurely, which could allow local users to overwrite arbitra (no CVSS)
- [CVE-2003-0538](https://cve.now/CVE-2003-0538.md): The mailcap file for mozart 1.2.5 and earlier causes Oz applications to be passed to the Oz interpreter, which allows remote attackers to ex (no CVSS)
- [CVE-2003-0539](https://cve.now/CVE-2003-0539.md): skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecur (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-07-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.