# CVEs published 2003-09-03

16 CVEs were published on September 3, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0658](https://cve.now/CVE-2003-0658.md): Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows rem (no CVSS)
- [CVE-2003-0686](https://cve.now/CVE-2003-0686.md): Buffer overflow in PAM SMB module (pam\_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute a (no CVSS)
- [CVE-2003-0688](https://cve.now/CVE-2003-0688.md): The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, wh (no CVSS)
- [CVE-2003-0689](https://cve.now/CVE-2003-0689.md): The getgrouplist function in GNU libc (glibc) 2.2.4 and earlier allows attackers to cause a denial of service (segmentation fault) and execu (no CVSS)
- [CVE-2003-0702](https://cve.now/CVE-2003-0702.md): Unknown vulnerability in an ISAPI plugin for ISS Server Sensor 7.0 XPU 20.16, 20.18, and possibly other versions before 20.19, allows remote (no CVSS)
- [CVE-2003-0707](https://cve.now/CVE-2003-0707.md): Buffer overflow in LinuxNode (node) before 0.3.2 allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2003-0708](https://cve.now/CVE-2003-0708.md): Format string vulnerability in LinuxNode (node) before 0.3.2 may allow attackers to cause a denial of service or execute arbitrary code. (no CVSS)
- [CVE-2003-0709](https://cve.now/CVE-2003-0709.md): Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to exe (no CVSS)
- [CVE-2003-0723](https://cve.now/CVE-2003-0723.md): Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2003-0724](https://cve.now/CVE-2003-0724.md): ssh on HP Tru64 UNIX 5.1B and 5.1A does not properly handle RSA signatures when digital certificates and RSA keys are used, which could allo (no CVSS)
- [CVE-2003-0725](https://cve.now/CVE-2003-0725.md): Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal S (no CVSS)
- [CVE-2003-0726](https://cve.now/CVE-2003-0726.md): RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that referen (no CVSS)
- [CVE-2003-0727](https://cve.now/CVE-2003-0727.md): Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of se (no CVSS)
- [CVE-2003-0728](https://cve.now/CVE-2003-0728.md): Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a refer (no CVSS)
- [CVE-2003-0729](https://cve.now/CVE-2003-0729.md): Buffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a TFTP request with a long filename. (no CVSS)
- [CVE-2003-0730](https://cve.now/CVE-2003-0730.md): Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-09-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.