# CVEs published 2004-03-16

21 CVEs were published on March 16, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2002-1576](https://cve.now/CVE-2002-1576.md): lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to (no CVSS)
- [CVE-2002-1577](https://cve.now/CVE-2002-1577.md): SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the (1) (no CVSS)
- [CVE-2002-1578](https://cve.now/CVE-2002-1578.md): The default installation of SAP R/3, when using Oracle and SQL\*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensi (no CVSS)
- [CVE-2002-1579](https://cve.now/CVE-2002-1579.md): SAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a connection to a high-numbered port, which generates (no CVSS)
- [CVE-2003-0202](https://cve.now/CVE-2003-0202.md): The (1) halstead and (2) gather\_stats scripts in metrics 1.0 allow local users to overwrite arbitrary files via a symlink attack on temporar (no CVSS)
- [CVE-2003-0257](https://cve.now/CVE-2003-0257.md): Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or root privileges. (no CVSS)
- [CVE-2003-0513](https://cve.now/CVE-2003-0513.md): Microsoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded (no CVSS)
- [CVE-2003-0514](https://cve.now/CVE-2003-0514.md): Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) direc (no CVSS)
- [CVE-2003-0592](https://cve.now/CVE-2003-0592.md): Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via (no CVSS)
- [CVE-2003-0593](https://cve.now/CVE-2003-0593.md): Opera allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory tr (no CVSS)
- [CVE-2003-0594](https://cve.now/CVE-2003-0594.md): Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory (no CVSS)
- [CVE-2003-1033](https://cve.now/CVE-2003-1033.md): The (1) instdbmsrv and (2) instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT environment variable as a p (no CVSS)
- [CVE-2003-1034](https://cve.now/CVE-2003-1034.md): The RPM installation of SAP DB 7.x creates the (1) dbmsrv or (2) lserver programs with world-writable permissions, which allows local users (no CVSS)
- [CVE-2003-1035](https://cve.now/CVE-2003-1035.md): The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to co (no CVSS)
- [CVE-2003-1036](https://cve.now/CVE-2003-1036.md): Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code (no CVSS)
- [CVE-2003-1037](https://cve.now/CVE-2003-1037.md): Format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS) allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2003-1038](https://cve.now/CVE-2003-1038.md): The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command paramet (no CVSS)
- [CVE-2003-1039](https://cve.now/CVE-2003-1039.md): Multiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute arbitrary code via a long HTTP Host header (no CVSS)
- [CVE-2004-0107](https://cve.now/CVE-2004-0107.md): The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temp (no CVSS)
- [CVE-2004-0217](https://cve.now/CVE-2004-0217.md): The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or ap (no CVSS)
- [CVE-2004-0224](https://cve.now/CVE-2004-0224.md): Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-03-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.