# CVEs published 2005-03-11

22 CVEs were published on March 11, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1097](https://cve.now/CVE-2003-1097.md): Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privileges via a long -l op (no CVSS)
- [CVE-2003-1098](https://cve.now/CVE-2003-1098.md): The Xserver for HP-UX 11.22 was not properly built, which introduced a vulnerability that allows local users to gain privileges. (no CVSS)
- [CVE-2003-1099](https://cve.now/CVE-2003-1099.md): shar on HP-UX B.11.00, B.11.04, and B.11.11 creates temporary files with predictable names in /tmp, which allows local users to cause a deni (no CVSS)
- [CVE-2003-1100](https://cve.now/CVE-2003-1100.md): Multiple cross-site scripting (XSS) vulnerabilities in Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2003-1101](https://cve.now/CVE-2003-1101.md): Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allows remote attackers to obtain the full path of the DM Web Server via invalid login credentials (no CVSS)
- [CVE-2003-1102](https://cve.now/CVE-2003-1102.md): Hummingbird CyberDOCS 3.5, 3.9, and 4.0, when running on IIS, uses insecure permissions for script source code files, which allows remote at (no CVSS)
- [CVE-2003-1103](https://cve.now/CVE-2003-1103.md): SQL injection vulnerability in loginact.asp for Hummingbird CyberDOCS before 3.9 allows remote attackers to execute arbitrary SQL commands. (no CVSS)
- [CVE-2003-1104](https://cve.now/CVE-2003-1104.md): Buffer overflow in IBM Tivoli Firewall Toolbox (TFST) 1.2 allows remote attackers to execute arbitrary code via unknown vectors. (no CVSS)
- [CVE-2003-1105](https://cve.now/CVE-2003-1105.md): Unknown vulnerability in Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to cause a denial of service (browser or Outlook (no CVSS)
- [CVE-2003-1106](https://cve.now/CVE-2003-1106.md): The SMTP service in Microsoft Windows 2000 before SP4 allows remote attackers to cause a denial of service (crash or hang) via an e-mail mes (no CVSS)
- [CVE-2003-1107](https://cve.now/CVE-2003-1107.md): The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is (no CVSS)
- [CVE-2003-1108](https://cve.now/CVE-2003-1108.md): The Session Initiation Protocol (SIP) implementation in Alcatel OmniPCX Enterprise 5.0 Lx allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2003-1109](https://cve.now/CVE-2003-1109.md): The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the (no CVSS)
- [CVE-2003-1110](https://cve.now/CVE-2003-1110.md): The Session Initiation Protocol (SIP) implementation in Columbia SIP User Agent (sipc) 1.74 and other versions before sipc 2.0 build 2003-02 (no CVSS)
- [CVE-2003-1111](https://cve.now/CVE-2003-1111.md): The Session Initiation Protocol (SIP) implementation in multiple dynamicsoft products including y and certain demo products for AppEngine al (no CVSS)
- [CVE-2003-1112](https://cve.now/CVE-2003-1112.md): The Session Initiation Protocol (SIP) implementation in Ingate Firewall and Ingate SIParator before 3.1.3 allows remote attackers to cause a (no CVSS)
- [CVE-2003-1113](https://cve.now/CVE-2003-1113.md): The Session Initiation Protocol (SIP) implementation in IPTel SIP Express Router 0.8.9 and earlier allows remote attackers to cause a denial (no CVSS)
- [CVE-2003-1114](https://cve.now/CVE-2003-1114.md): The Session Initiation Protocol (SIP) implementation in Mediatrix Telecom VoIP Access Devices and Gateways running SIPv2.4 and SIPv4.3 firmw (no CVSS)
- [CVE-2003-1115](https://cve.now/CVE-2003-1115.md): The Session Initiation Protocol (SIP) implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remot (no CVSS)
- [CVE-2005-0709](https://cve.now/CVE-2005-0709.md): MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary c (no CVSS)
- [CVE-2005-0710](https://cve.now/CVE-2005-0710.md): MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path (no CVSS)
- [CVE-2005-0711](https://cve.now/CVE-2005-0711.md): MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-03-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.