# CVEs published 2003-09-19

5 CVEs were published on September 19, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2002-1567](https://cve.now/CVE-2002-1567.md): Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2003-0742](https://cve.now/CVE-2003-0742.md): SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE\_ADDR environment variable to cause menu.m (no CVSS)
- [CVE-2003-0758](https://cve.now/CVE-2003-0758.md): Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users to gain root privileges via a long command (no CVSS)
- [CVE-2003-0759](https://cve.now/CVE-2003-0759.md): Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privileges via a long comman (no CVSS)
- [CVE-2003-0805](https://cve.now/CVE-2003-0805.md): Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) a long (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-09-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.