# CVEs published 2003-08-02

12 CVEs were published on August 2, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0631](https://cve.now/CVE-2003-0631.md): VMware GSX Server 2.5.1 build 4968 and earlier, and Workstation 4.0 and earlier, allows local users to gain root privileges via certain eniv (no CVSS)
- [CVE-2003-0632](https://cve.now/CVE-2003-0632.md): Buffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI program (FNDWRR.exe) of Oracle E-Business Suite 11.0 and 11.5.1 th (no CVSS)
- [CVE-2003-0633](https://cve.now/CVE-2003-0633.md): Multiple vulnerabilities in aoljtest.jsp of Oracle Applications AOL/J Setup Test Suite in Oracle E-Business Suite 11.5.1 through 11.5.8 allo (no CVSS)
- [CVE-2003-0634](https://cve.now/CVE-2003-0634.md): Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated d (no CVSS)
- [CVE-2003-0635](https://cve.now/CVE-2003-0635.md): Unknown vulnerability or vulnerabilities in Novell iChain 2.2 before Support Pack 1, with unknown impact, possibly related to unauthorized a (no CVSS)
- [CVE-2003-0636](https://cve.now/CVE-2003-0636.md): Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attac (no CVSS)
- [CVE-2003-0637](https://cve.now/CVE-2003-0637.md): Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote a (no CVSS)
- [CVE-2003-0638](https://cve.now/CVE-2003-0638.md): Multiple buffer overflows in Novell iChain 2.1 before Field Patch 3, and iChain 2.2 before Field Patch 1a, allow attackers to cause a denial (no CVSS)
- [CVE-2003-0639](https://cve.now/CVE-2003-0639.md): Unknown vulnerability in Novell iChain 2.2 before Support Pack 1 allows users to access restricted or secure pages without authentication. (no CVSS)
- [CVE-2003-0640](https://cve.now/CVE-2003-0640.md): BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to overwrite usernames and (no CVSS)
- [CVE-2003-0641](https://cve.now/CVE-2003-0641.md): WatchGuard ServerLock for Windows 2000 before SL 2.0.3 allows local users to load arbitrary modules via the OpenProcess() function, as demon (no CVSS)
- [CVE-2003-0642](https://cve.now/CVE-2003-0642.md): WatchGuard ServerLock for Windows 2000 before SL 2.0.4 allows local users to access kernel memory via a symlink attack on \\Device\\PhysicalMe (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-08-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.