# CVEs published 2003-09-23

6 CVEs were published on September 23, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0697](https://cve.now/CVE-2003-0697.md): Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows local users to cause (no CVSS)
- [CVE-2003-0783](https://cve.now/CVE-2003-0783.md): Multiple buffer overflows in hztty 2.0 allow local users to gain root privileges. (no CVSS)
- [CVE-2003-0784](https://cve.now/CVE-2003-0784.md): Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, an (no CVSS)
- [CVE-2003-0785](https://cve.now/CVE-2003-0785.md): ipmasq before 3.5.12, in certain configurations, may forward packets to the external interface even if the packets are not associated with a (no CVSS)
- [CVE-2003-0826](https://cve.now/CVE-2003-0826.md): lsh daemon (lshd) does not properly return from certain functions in (1) read\_line.c, (2) channel\_commands.c, or (3) client\_keyexchange.c wh (no CVSS)
- [CVE-2003-0827](https://cve.now/CVE-2003-0827.md): The DB2 Discovery Service for IBM DB2 before FixPak 10a allows remote attackers to cause a denial of service (crash) via a long packet to UD (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-09-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.