# CVEs published 2003-09-06

15 CVEs were published on September 6, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0743](https://cve.now/CVE-2003-0743.md): Heap-based buffer overflow in smtp\_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute (no CVSS)
- [CVE-2003-0744](https://cve.now/CVE-2003-0744.md): The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service (process hang and termination) vi (no CVSS)
- [CVE-2003-0745](https://cve.now/CVE-2003-0745.md): SNMPc 6.0.8 and earlier performs authentication to the server on the client side, which allows remote attackers to gain privileges by decryp (no CVSS)
- [CVE-2003-0746](https://cve.now/CVE-2003-0746.md): Various Distributed Computing Environment (DCE) implementations, including HP OpenView, allow remote attackers to cause a denial of service (no CVSS)
- [CVE-2003-0747](https://cve.now/CVE-2003-0747.md): wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such (no CVSS)
- [CVE-2003-0748](https://cve.now/CVE-2003-0748.md): Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to read arb (no CVSS)
- [CVE-2003-0749](https://cve.now/CVE-2003-0749.md): Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to i (no CVSS)
- [CVE-2003-0750](https://cve.now/CVE-2003-0750.md): secure.php in PY-Membres 4.2 and earlier allows remote attackers to bypass authentication by setting the adminpy parameter. (no CVSS)
- [CVE-2003-0751](https://cve.now/CVE-2003-0751.md): SQL injection vulnerability in pass\_done.php for PY-Membres 4.2 and earlier allows remote attackers to execute arbitrary SQL queries via the (no CVSS)
- [CVE-2003-0752](https://cve.now/CVE-2003-0752.md): SQL injection vulnerability in global.php3 of AttilaPHP 3.0, and possibly earlier versions, allows remote attackers to bypass authentication (no CVSS)
- [CVE-2003-0753](https://cve.now/CVE-2003-0753.md): nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphp\_conf (no CVSS)
- [CVE-2003-0754](https://cve.now/CVE-2003-0754.md): nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphp\_users array, (no CVSS)
- [CVE-2003-0755](https://cve.now/CVE-2003-0755.md): Buffer overflow in sys\_cmd.c for gtkftpd 1.0.4 and earlier allows remote attackers to execute arbitrary code by creating long directory name (no CVSS)
- [CVE-2003-0756](https://cve.now/CVE-2003-0756.md): Directory traversal vulnerability in sitebuilder.cgi in SiteBuilder 1.4 allows remote attackers to read arbitrary files via .. (no CVSS)
- [CVE-2003-0757](https://cve.now/CVE-2003-0757.md): Check Point FireWall-1 4.0 and 4.1 before SP5 allows remote attackers to obtain the IP addresses of internal interfaces via certain SecuRemo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-09-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.