# CVEs published 2003-08-01

15 CVEs were published on August 1, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0148](https://cve.now/CVE-2003-0148.md): The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of (no CVSS)
- [CVE-2003-0149](https://cve.now/CVE-2003-0149.md): Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2003-0459](https://cve.now/CVE-2003-0459.md): KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Re (no CVSS)
- [CVE-2003-0466](https://cve.now/CVE-2003-0466.md): Off-by-one error in the fb\_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, (no CVSS)
- [CVE-2003-0575](https://cve.now/CVE-2003-0575.md): Heap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attack (no CVSS)
- [CVE-2003-0606](https://cve.now/CVE-2003-0606.md): sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files. (no CVSS)
- [CVE-2003-0609](https://cve.now/CVE-2003-0609.md): Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long L (no CVSS)
- [CVE-2003-0610](https://cve.now/CVE-2003-0610.md): Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a cer (no CVSS)
- [CVE-2003-0611](https://cve.now/CVE-2003-0611.md): Multiple buffer overflows in xtokkaetama 1.0 allow local users to gain privileges via a long (1) -display command line argument or (2) XTOKK (no CVSS)
- [CVE-2003-0614](https://cve.now/CVE-2003-0614.md): Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script v (no CVSS)
- [CVE-2003-0615](https://cve.now/CVE-2003-0615.md): Cross-site scripting (XSS) vulnerability in start\_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into t (no CVSS)
- [CVE-2003-0616](https://cve.now/CVE-2003-0616.md): Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2003-0619](https://cve.now/CVE-2003-0619.md): Integer signedness error in the decode\_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2003-0620](https://cve.now/CVE-2003-0620.md): Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via (1) MANDATORY\_MANPATH (no CVSS)
- [CVE-2003-0625](https://cve.now/CVE-2003-0625.md): Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-08-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.