# CVEs published 2003-08-14

12 CVEs were published on August 14, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0546](https://cve.now/CVE-2003-0546.md): up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsigned packages to be in (no CVSS)
- [CVE-2003-0613](https://cve.now/CVE-2003-0613.md): Buffer overflow in zblast-svgalib of zblast 1.2.1 and earlier allows local users to execute arbitrary code via the high score file. (no CVSS)
- [CVE-2003-0645](https://cve.now/CVE-2003-0645.md): man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the ~/.manpath file, even when running setuid, which c (no CVSS)
- [CVE-2003-0649](https://cve.now/CVE-2003-0649.md): Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long HOME environment variable. (no CVSS)
- [CVE-2003-0656](https://cve.now/CVE-2003-0656.md): eroaster before 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file that is used as a lockfile. (no CVSS)
- [CVE-2003-0657](https://cve.now/CVE-2003-0657.md): Multiple SQL injection vulnerabilities in the infolog module for phpgroupware 0.9.14 and earlier could allow remote attackers to conduct una (no CVSS)
- [CVE-2003-0669](https://cve.now/CVE-2003-0669.md): Unknown vulnerability in Solaris 2.6 through 9 causes a denial of service (system panic) via "a rare race condition" or an attack by local u (no CVSS)
- [CVE-2003-0670](https://cve.now/CVE-2003-0670.md): Sustworks IPNetSentryX and IPNetMonitorX allow local users to sniff network packets via the setuid helper applications (1) RunTCPDump, which (no CVSS)
- [CVE-2003-0671](https://cve.now/CVE-2003-0671.md): Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via the device name argu (no CVSS)
- [CVE-2003-0672](https://cve.now/CVE-2003-0672.md): Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovid (no CVSS)
- [CVE-2003-0676](https://cve.now/CVE-2003-0676.md): Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (aka Sun ONE) allows remote attackers to read arbitrary f (no CVSS)
- [CVE-2003-0677](https://cve.now/CVE-2003-0677.md): Cisco CSS 11000 routers on the CS800 chassis allow remote attackers to cause a denial of service (CPU consumption or reboot) via a large num (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-08-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.