# CVEs published 2003-12-02 10 CVEs were published on December 2, 2003: 0 critical, 0 high. Days are UTC. - [CVE-2003-0914](https://cve.now/CVE-2003-0914.md): ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns ne (no CVSS) - [CVE-2003-0960](https://cve.now/CVE-2003-0960.md): OpenCA before 0.9.1.4 does not use the correct certificate in a chain to check the serial, which could cause OpenCA to accept revoked or exp (no CVSS) - [CVE-2003-0961](https://cve.now/CVE-2003-0961.md): Integer overflow in the do\_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privilege (no CVSS) - [CVE-2003-0967](https://cve.now/CVE-2003-0967.md): rad\_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RADIUS string attribute (no CVSS) - [CVE-2003-0968](https://cve.now/CVE-2003-0968.md): Stack-based buffer overflow in SMB\_Logon\_Server of the rlm\_smb experimental module for FreeRADIUS 0.9.3 and earlier allows remote attackers (no CVSS) - [CVE-2003-0970](https://cve.now/CVE-2003-0970.md): The Network Management Port on Sun Fire B1600 systems allows remote attackers to cause a denial of service (packet loss) via ARP packets, wh (no CVSS) - [CVE-2003-0971](https://cve.now/CVE-2003-0971.md): GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption a (no CVSS) - [CVE-2003-0972](https://cve.now/CVE-2003-0972.md): Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code vi (no CVSS) - [CVE-2003-0973](https://cve.now/CVE-2003-0973.md): Unknown vulnerability in mod\_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service (httpd (no CVSS) - [CVE-2003-0974](https://cve.now/CVE-2003-0974.md): Applied Watch Command Center allows remote attackers to conduct unauthorized activities without authentication, such as (1) add new users to (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2003-12-02 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.