# CVEs published 2003-10-25

13 CVEs were published on October 25, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2001-1411](https://cve.now/CVE-2001-1411.md): Format string vulnerability in gm4 (aka m4) on Mac OS X may allow local users to gain privileges if gm4 is called by setuid programs. (no CVSS)
- [CVE-2001-1412](https://cve.now/CVE-2001-1412.md): nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the password file by specifying passwd as a command li (no CVSS)
- [CVE-2002-1569](https://cve.now/CVE-2002-1569.md): gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for (no CVSS)
- [CVE-2003-0850](https://cve.now/CVE-2003-0850.md): The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary (no CVSS)
- [CVE-2003-0852](https://cve.now/CVE-2003-0852.md): Format string vulnerability in send\_message.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP servers to cause a denial of service (no CVSS)
- [CVE-2003-0853](https://cve.now/CVE-2003-0853.md): An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary cod (no CVSS)
- [CVE-2003-0854](https://cve.now/CVE-2003-0854.md): ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely (no CVSS)
- [CVE-2003-0872](https://cve.now/CVE-2003-0872.md): Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink atta (no CVSS)
- [CVE-2003-0874](https://cve.now/CVE-2003-0874.md): Multiple SQL injection vulnerabilities in DeskPRO 1.1.0 and earlier allow remote attackers to insert arbitrary SQL and conduct unauthorized (no CVSS)
- [CVE-2003-0875](https://cve.now/CVE-2003-0875.md): Symbolic link vulnerability in the slpd script slpd.all\_init for OpenSLP before 1.0.11 allows local users to overwrite arbitrary files via t (no CVSS)
- [CVE-2003-0894](https://cve.now/CVE-2003-0894.md): Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execut (no CVSS)
- [CVE-2003-0896](https://cve.now/CVE-2003-0896.md): The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1\_03 and earlier all (no CVSS)
- [CVE-2003-0897](https://cve.now/CVE-2003-0897.md): "Shatter" vulnerability in CommCtl32.dll in Windows XP may allow local users to execute arbitrary code by sending (1) BCM\_GETTEXTMARGIN or ( (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-10-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.