# CVEs published 2003-09-25

4 CVEs were published on September 25, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0786](https://cve.now/CVE-2003-0786.md): The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the resul (no CVSS)
- [CVE-2003-0787](https://cve.now/CVE-2003-0787.md): The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers (no CVSS)
- [CVE-2003-0804](https://cve.now/CVE-2003-0804.md): The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on (no CVSS)
- [CVE-2003-0831](https://cve.now/CVE-2003-0831.md): ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote att (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-09-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.