# CVEs published 2005-03-12

24 CVEs were published on March 12, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1116](https://cve.now/CVE-2003-1116.md): The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, a (no CVSS)
- [CVE-2003-1117](https://cve.now/CVE-2003-1117.md): Buffer overflow in RealSystem Server 6.x, 7.x and 8.x, and RealSystem Proxy 8.x, related to URL error handling, allows remote attackers to c (no CVSS)
- [CVE-2003-1118](https://cve.now/CVE-2003-1118.md): Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service (client crash) and exec (no CVSS)
- [CVE-2003-1119](https://cve.now/CVE-2003-1119.md): SSH Secure Shell before 3.2.9 allows remote attackers to cause a denial of service via malformed BER/DER packets. (no CVSS)
- [CVE-2003-1120](https://cve.now/CVE-2003-1120.md): Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local u (no CVSS)
- [CVE-2003-1121](https://cve.now/CVE-2003-1121.md): Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, which allows remote att (no CVSS)
- [CVE-2003-1122](https://cve.now/CVE-2003-1122.md): ScriptLogic 4.01, and possibly other versions before 4.14, uses insecure permissions for the LOGS$ share, which allows users to modify log r (no CVSS)
- [CVE-2003-1123](https://cve.now/CVE-2003-1123.md): Sun Java Runtime Environment (JRE) and SDK 1.4.0\_01 and earlier allows untrusted applets to access certain information within trusted applet (no CVSS)
- [CVE-2003-1124](https://cve.now/CVE-2003-1124.md): Unknown vulnerability in Sun Management Center (SunMC) 2.1.1, 3.0, and 3.0 Revenue Release (RR), when installed and run by root, allows loca (no CVSS)
- [CVE-2003-1125](https://cve.now/CVE-2003-1125.md): Unknown vulnerability in ns-ldapd for Sun ONE Directory Server 4.16, 5.0, and 5.1 allows LDAP clients to cause a denial of service (service (no CVSS)
- [CVE-2003-1126](https://cve.now/CVE-2003-1126.md): Unknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2003-1127](https://cve.now/CVE-2003-1127.md): Whale Communications e-Gap 2.5 on Windows 2000 allows remote attackers to obtain the source code for the login page via the HTTP TRACE metho (no CVSS)
- [CVE-2003-1128](https://cve.now/CVE-2003-1128.md): XMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7, 2003, allows remote attackers to execute arbi (no CVSS)
- [CVE-2003-1129](https://cve.now/CVE-2003-1129.md): Buffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45 allows remote attackers to cause a denial (no CVSS)
- [CVE-2005-0448](https://cve.now/CVE-2005-0448.md): Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tr (no CVSS)
- [CVE-2005-0718](https://cve.now/CVE-2005-0718.md): Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (no CVSS)
- [CVE-2005-0719](https://cve.now/CVE-2005-0719.md): Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local users to cause a denial of serv (no CVSS)
- [CVE-2005-0720](https://cve.now/CVE-2005-0720.md): PHP remote file inclusion vulnerability in admin/header.php in PHP mcNews 1.3 allows remote attackers to execute arbitrary PHP code by modif (no CVSS)
- [CVE-2005-0721](https://cve.now/CVE-2005-0721.md): PHP remote file inclusion vulnerability in modules.php in eXPerience2 allows remote attackers to execute arbitrary PHP code by modifying the (no CVSS)
- [CVE-2005-0722](https://cve.now/CVE-2005-0722.md): eXPerience2 allows remote attackers to obtain the full path for the web root via a direct request to modules.php without any parameters, whi (no CVSS)
- [CVE-2005-0723](https://cve.now/CVE-2005-0723.md): Cross-site scripting (XSS) vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlier allows remote attackers to i (no CVSS)
- [CVE-2005-0724](https://cve.now/CVE-2005-0724.md): paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via (1) an invalid str parameter to pafiledb.php, or a dire (no CVSS)
- [CVE-2005-0725](https://cve.now/CVE-2005-0725.md): SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows remote attackers to exe (no CVSS)
- [CVE-2005-0726](https://cve.now/CVE-2005-0726.md): SQL injection vulnerability in editpost.php in UBB.threads 6.0 allows remote attackers to execute arbitrary SQL commands via the Number para (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-03-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.