# CVEs published 2003-11-21 9 CVEs were published on November 21, 2003: 0 critical, 0 high. Days are UTC. - [CVE-2003-0938](https://cve.now/CVE-2003-0938.md): vos24u.c in SAP database server (SAP DB) 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" i (no CVSS) - [CVE-2003-0939](https://cve.now/CVE-2003-0939.md): eo420\_GetStringFromVarPart in veo420.c for SAP database server (SAP DB) 7.4.03.27 and earlier may allow remote attackers to execute arbitrar (no CVSS) - [CVE-2003-0940](https://cve.now/CVE-2003-0940.md): Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows remote attackers to read arbitrary files via (no CVSS) - [CVE-2003-0941](https://cve.now/CVE-2003-0941.md): web-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent Administration pages and modify configuration via a dir (no CVSS) - [CVE-2003-0942](https://cve.now/CVE-2003-0942.md): Buffer overflow in Web Agent Administration service in web-tools for SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary co (no CVSS) - [CVE-2003-0943](https://cve.now/CVE-2003-0943.md): web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain pot (no CVSS) - [CVE-2003-0944](https://cve.now/CVE-2003-0944.md): Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via (no CVSS) - [CVE-2003-0945](https://cve.now/CVE-2003-0945.md): The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduc (no CVSS) - [CVE-2003-0955](https://cve.now/CVE-2003-0955.md): OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code in 3.4 via a p (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2003-11-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.