# CVEs published 2003-10-09

11 CVEs were published on October 9, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0839](https://cve.now/CVE-2003-0839.md): Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitra (no CVSS)
- [CVE-2003-0840](https://cve.now/CVE-2003-0840.md): Buffer overflow in dtprintinfo on HP-UX 11.00, and possibly other operating systems, allows local users to gain root privileges via a long D (no CVSS)
- [CVE-2003-0841](https://cve.now/CVE-2003-0841.md): The grid option in PeopleSoft 8.42 stores temporary .xls files in guessable directories under the web document root, which allows remote att (no CVSS)
- [CVE-2003-0842](https://cve.now/CVE-2003-0842.md): Stack-based buffer overflow in mod\_gzip\_printf for mod\_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in deb (no CVSS)
- [CVE-2003-0843](https://cve.now/CVE-2003-0843.md): Format string vulnerability in mod\_gzip\_printf for mod\_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in deb (no CVSS)
- [CVE-2003-0844](https://cve.now/CVE-2003-0844.md): mod\_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode without the Apache log, allows local users (no CVSS)
- [CVE-2003-0845](https://cve.now/CVE-2003-0845.md): Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, a (no CVSS)
- [CVE-2003-0846](https://cve.now/CVE-2003-0846.md): SuSEconfig.javarunt in the javarunt package on SuSE Linux 7.3Pro allows local users to overwrite arbitrary files via a symlink attack on the (no CVSS)
- [CVE-2003-0847](https://cve.now/CVE-2003-0847.md): SuSEconfig.susewm in the susewm package on SuSE Linux 8.2Pro allows local users to overwrite arbitrary files via a symlink attack on the sus (no CVSS)
- [CVE-2003-0848](https://cve.now/CVE-2003-0848.md): Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified sl (no CVSS)
- [CVE-2003-0849](https://cve.now/CVE-2003-0849.md): Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified l (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-10-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
