# CVEs published 2003-07-25 26 CVEs were published on July 25, 2003: 0 critical, 0 high. Days are UTC. - [CVE-2003-0230](https://cve.now/CVE-2003-0230.md): Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another (no CVSS) - [CVE-2003-0231](https://cve.now/CVE-2003-0231.md): Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long re (no CVSS) - [CVE-2003-0232](https://cve.now/CVE-2003-0232.md): Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) (no CVSS) - [CVE-2003-0346](https://cve.now/CVE-2003-0346.md): Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a M (no CVSS) - [CVE-2003-0421](https://cve.now/CVE-2003-0421.md): Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via an MS-DOS device na (no CVSS) - [CVE-2003-0422](https://cve.now/CVE-2003-0422.md): Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via a request to view\_b (no CVSS) - [CVE-2003-0423](https://cve.now/CVE-2003-0423.md): parse\_xml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to obtain the source code for parseable fil (no CVSS) - [CVE-2003-0424](https://cve.now/CVE-2003-0424.md): Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded s (no CVSS) - [CVE-2003-0425](https://cve.now/CVE-2003-0425.md): Directory traversal vulnerability in Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to read arbitrary files (no CVSS) - [CVE-2003-0426](https://cve.now/CVE-2003-0426.md): The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page t (no CVSS) - [CVE-2003-0460](https://cve.now/CVE-2003-0460.md): The rotatelogs program on Apache before 1.3.28, for Windows and OS/2 systems, does not properly ignore certain control characters that are r (no CVSS) - [CVE-2003-0461](https://cve.now/CVE-2003-0461.md): /proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain (no CVSS) - [CVE-2003-0462](https://cve.now/CVE-2003-0462.md): A race condition in the way env\_start and env\_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 (no CVSS) - [CVE-2003-0464](https://cve.now/CVE-2003-0464.md): The RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow local users to bind to UDP ports that are u (no CVSS) - [CVE-2003-0502](https://cve.now/CVE-2003-0502.md): Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (no CVSS) - [CVE-2003-0525](https://cve.now/CVE-2003-0525.md): The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to ca (no CVSS) - [CVE-2003-0550](https://cve.now/CVE-2003-0550.md): The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to modify the bridge top (no CVSS) - [CVE-2003-0551](https://cve.now/CVE-2003-0551.md): The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which could allow attackers to cause a denial of se (no CVSS) - [CVE-2003-0552](https://cve.now/CVE-2003-0552.md): Linux 2.4.x allows remote attackers to spoof the bridge Forwarding table via forged packets whose source addresses are the same as the targe (no CVSS) - [CVE-2003-0562](https://cve.now/CVE-2003-0562.md): Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denial of service (ABEND) (no CVSS) - [CVE-2003-0567](https://cve.now/CVE-2003-0567.md): Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence o (no CVSS) - [CVE-2003-0581](https://cve.now/CVE-2003-0581.md): X Fontserver for Truetype fonts (xfstt) 1.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a ( (no CVSS) - [CVE-2003-0595](https://cve.now/CVE-2003-0595.md): Buffer overflow in WiTango Application Server and Tango 2000 allows remote attackers to execute arbitrary code via a long cookie to Witango\_ (no CVSS) - [CVE-2003-0596](https://cve.now/CVE-2003-0596.md): FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, wh (no CVSS) - [CVE-2003-0597](https://cve.now/CVE-2003-0597.md): Unknown vulnerability in display of Merge before 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges. (no CVSS) - [CVE-2003-0599](https://cve.now/CVE-2003-0599.md): Unknown vulnerability in the Virtual File System (VFS) capability for phpGroupWare 0.9.16preRC and versions before 0.9.14.004 with unknown i (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2003-07-25 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.