# CVEs published 2003-07-15

12 CVEs were published on July 15, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0252](https://cve.now/CVE-2003-0252.md): Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a d (no CVSS)
- [CVE-2003-0456](https://cve.now/CVE-2003-0456.md): VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folder that does not exist (no CVSS)
- [CVE-2003-0465](https://cve.now/CVE-2003-0465.md): The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected be (no CVSS)
- [CVE-2003-0553](https://cve.now/CVE-2003-0553.md): Buffer overflow in the Client Detection Tool (CDT) plugin (npcdt.dll) for Netscape 7.02 allows remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2003-0554](https://cve.now/CVE-2003-0554.md): NeoModus Direct Connect 1.0 build 9, and possibly other versions, allows remote attackers to cause a denial of service (connection and possi (no CVSS)
- [CVE-2003-0555](https://cve.now/CVE-2003-0555.md): ImageMagick 5.4.3.x and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a "%x" filenam (no CVSS)
- [CVE-2003-0556](https://cve.now/CVE-2003-0556.md): Polycom MGC 25 allows remote attackers to cause a denial of service (crash) via a large number of "user" requests to the control port 5003, (no CVSS)
- [CVE-2003-0557](https://cve.now/CVE-2003-0557.md): SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user (no CVSS)
- [CVE-2003-0558](https://cve.now/CVE-2003-0558.md): Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request. (no CVSS)
- [CVE-2003-0559](https://cve.now/CVE-2003-0559.md): mainfile.php in phpforum 2 RC-1, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by modifying the MAIN\_ (no CVSS)
- [CVE-2003-0560](https://cve.now/CVE-2003-0560.md): SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the id parameter. (no CVSS)
- [CVE-2003-0561](https://cve.now/CVE-2003-0561.md): Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP banner, or long response (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-07-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.