# CVEs published 2003-09-18 10 CVEs were published on September 18, 2003: 0 critical, 0 high. Days are UTC. - [CVE-2003-0680](https://cve.now/CVE-2003-0680.md): Unknown vulnerability in NFS for SGI IRIX 6.5.21 and earlier may allow an NFS client to bypass read-only restrictions. (no CVSS) - [CVE-2003-0681](https://cve.now/CVE-2003-0681.md): A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) m (no CVSS) - [CVE-2003-0682](https://cve.now/CVE-2003-0682.md): "Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695. (no CVSS) - [CVE-2003-0690](https://cve.now/CVE-2003-0690.md): KDM in KDE 3.1.3 and earlier does not verify whether the pam\_setcred function call succeeds, which may allow attackers to gain root privileg (no CVSS) - [CVE-2003-0692](https://cve.now/CVE-2003-0692.md): KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attacke (no CVSS) - [CVE-2003-0694](https://cve.now/CVE-2003-0694.md): The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using (no CVSS) - [CVE-2003-0695](https://cve.now/CVE-2003-0695.md): Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (no CVSS) - [CVE-2003-0801](https://cve.now/CVE-2003-0801.md): Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute arbitrary web script (no CVSS) - [CVE-2003-0802](https://cve.now/CVE-2003-0802.md): Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root, and the physical pa (no CVSS) - [CVE-2003-0803](https://cve.now/CVE-2003-0803.md): Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2003-09-18 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.