# CVEs published 2003-11-18 20 CVEs were published on November 18, 2003: 0 critical, 0 high. Days are UTC. - [CVE-2003-0089](https://cve.now/CVE-2003-0089.md): Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long (no CVSS) - [CVE-2003-0628](https://cve.now/CVE-2003-0628.md): PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the ful (no CVSS) - [CVE-2003-0629](https://cve.now/CVE-2003-0629.md): Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to inser (no CVSS) - [CVE-2003-0795](https://cve.now/CVE-2003-0795.md): The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the (no CVSS) - [CVE-2003-0812](https://cve.now/CVE-2003-0812.md): Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary (no CVSS) - [CVE-2003-0820](https://cve.now/CVE-2003-0820.md): Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names (no CVSS) - [CVE-2003-0821](https://cve.now/CVE-2003-0821.md): Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro (no CVSS) - [CVE-2003-0822](https://cve.now/CVE-2003-0822.md): Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attack (no CVSS) - [CVE-2003-0824](https://cve.now/CVE-2003-0824.md): Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePo (no CVSS) - [CVE-2003-0856](https://cve.now/CVE-2003-0856.md): iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as other users to the kernel netlink interfac (no CVSS) - [CVE-2003-0858](https://cve.now/CVE-2003-0858.md): Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users (no CVSS) - [CVE-2003-0859](https://cve.now/CVE-2003-0859.md): The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as (no CVSS) - [CVE-2003-0932](https://cve.now/CVE-2003-0932.md): Buffer overflow in omega-rpg 0.90 allows local users to execute arbitrary code via a long (1) command line or (2) environment variable. (no CVSS) - [CVE-2003-0936](https://cve.now/CVE-2003-0936.md): Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help interface using AWHOST32 (no CVSS) - [CVE-2003-0937](https://cve.now/CVE-2003-0937.md): SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PI (no CVSS) - [CVE-2003-0946](https://cve.now/CVE-2003-0946.md): Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, allows remote attackers (no CVSS) - [CVE-2003-0947](https://cve.now/CVE-2003-0947.md): Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable. (no CVSS) - [CVE-2003-0948](https://cve.now/CVE-2003-0948.md): Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable. (no CVSS) - [CVE-2003-0950](https://cve.now/CVE-2003-0950.md): PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet (no CVSS) - [CVE-2003-0951](https://cve.now/CVE-2003-0951.md): Partition Manager (parmgr) in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attacke (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2003-11-18 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.