# CVEs published 2003-09-12

31 CVEs were published on September 12, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2002-1352](https://cve.now/CVE-2002-1352.md): Per Magne Knutsen's CartMan shopping cart (cartman.php) 1.04 and earlier allows remote attackers to modify product prices by changing the pr (no CVSS)
- [CVE-2003-0528](https://cve.now/CVE-2003-0528.md): Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execut (no CVSS)
- [CVE-2003-0541](https://cve.now/CVE-2003-0541.md): gtkhtml before 1.1.10, as used in Evolution, allows remote attackers to cause a denial of service (crash) via a malformed message that cause (no CVSS)
- [CVE-2003-0703](https://cve.now/CVE-2003-0703.md): KisMAC before 0.05d trusts user-supplied variables to load arbitrary kernels or kernel modules, which allows local users to gain privileges (no CVSS)
- [CVE-2003-0704](https://cve.now/CVE-2003-0704.md): KisMAC before 0.05d trusts user-supplied variables when chown'ing files or directories, which allows local users to gain privileges via the (no CVSS)
- [CVE-2003-0705](https://cve.now/CVE-2003-0705.md): Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2003-0706](https://cve.now/CVE-2003-0706.md): Unknown vulnerability in mah-jong 1.5.6 and earlier allows remote attackers to cause a denial of service (tight loop). (no CVSS)
- [CVE-2003-0715](https://cve.now/CVE-2003-0715.md): Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execut (no CVSS)
- [CVE-2003-0720](https://cve.now/CVE-2003-0720.md): Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type. (no CVSS)
- [CVE-2003-0721](https://cve.now/CVE-2003-0721.md): Integer signedness error in rfc2231\_get\_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an em (no CVSS)
- [CVE-2003-0760](https://cve.now/CVE-2003-0760.md): Blubster 2.5 allows remote attackers to cause a denial of service (crash) via a flood of connections to UDP port 701. (no CVSS)
- [CVE-2003-0761](https://cve.now/CVE-2003-0761.md): Buffer overflow in the get\_msg\_text of chan\_sip.c in the Session Initiation Protocol (SIP) protocol implementation for Asterisk releases bef (no CVSS)
- [CVE-2003-0762](https://cve.now/CVE-2003-0762.md): Buffer overflow in (1) foxweb.dll and (2) foxweb.exe of Foxweb 2.5 allows remote attackers to execute arbitrary code via a long URL (PATH\_IN (no CVSS)
- [CVE-2003-0763](https://cve.now/CVE-2003-0763.md): Cross-site scripting (XSS) vulnerability in Escapade Scripting Engine (ESP) allows remote attackers to inject arbitrary script via the metho (no CVSS)
- [CVE-2003-0764](https://cve.now/CVE-2003-0764.md): Escapade Scripting Engine (ESP) allows remote attackers to obtain sensitive path information via a malformed request, which leaks the inform (no CVSS)
- [CVE-2003-0765](https://cve.now/CVE-2003-0765.md): The IN\_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a la (no CVSS)
- [CVE-2003-0766](https://cve.now/CVE-2003-0766.md): Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious servers to execute arb (no CVSS)
- [CVE-2003-0767](https://cve.now/CVE-2003-0767.md): Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and 0.27 and earlier for (no CVSS)
- [CVE-2003-0768](https://cve.now/CVE-2003-0768.md): Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null ch (no CVSS)
- [CVE-2003-0769](https://cve.now/CVE-2003-0769.md): Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attackers to insert arbitrary web scr (no CVSS)
- [CVE-2003-0770](https://cve.now/CVE-2003-0770.md): FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, w (no CVSS)
- [CVE-2003-0771](https://cve.now/CVE-2003-0771.md): Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute ar (no CVSS)
- [CVE-2003-0772](https://cve.now/CVE-2003-0772.md): Multiple buffer overflows in WS\_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary cod (no CVSS)
- [CVE-2003-0773](https://cve.now/CVE-2003-0773.md): saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE\_NET\_INIT RPC call, which allow (no CVSS)
- [CVE-2003-0774](https://cve.now/CVE-2003-0774.md): saned in sane-backends 1.0.7 and earlier does not quickly handle connection drops, which allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2003-0775](https://cve.now/CVE-2003-0775.md): saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been (no CVSS)
- [CVE-2003-0776](https://cve.now/CVE-2003-0776.md): saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," wi (no CVSS)
- [CVE-2003-0777](https://cve.now/CVE-2003-0777.md): saned in sane-backends 1.0.7 and earlier, when debug messages are enabled, does not properly handle dropped connections, which can prevent s (no CVSS)
- [CVE-2003-0778](https://cve.now/CVE-2003-0778.md): saned in sane-backends 1.0.7 and earlier, and possibly later versions, does not properly allocate memory in certain cases, which could allow (no CVSS)
- [CVE-2003-0779](https://cve.now/CVE-2003-0779.md): SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2003-0780](https://cve.now/CVE-2003-0780.md): Buffer overflow in get\_salt\_from\_password from sql\_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privil (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-09-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.