Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: February 2003

9 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2003-1090
    43Plan

    Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.

    CriticalCVSS 10.0Proof of conceptEPSS 11%

    celestial software · absolutetelnetFeb 6, 2003

  • CVE-2003-0002
    34Monitor

    Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 allows remote attacke

    MediumCVSS 6.8Proof of conceptEPSS 23%

    microsoft · content management serverFeb 7, 2003

  • CVE-2003-0003
    43Plan

    Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows X

    HighCVSS 7.5Proof of conceptEPSS 43%

    microsoft · windows 2000 terminal servicesFeb 7, 2003

  • CVE-2003-0015
    37Monitor

    Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code

    HighCVSS 7.5Proof of conceptEPSS 23%

    cvs · cvsFeb 7, 2003

  • CVE-2003-0016
    35Monitor

    Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows remote attackers to cause a denial of service or

    HighCVSS 7.5No exploitEPSS 17%

    apache · http serverFeb 7, 2003

  • CVE-2003-0027
    40Plan

    Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allows remote attackers t

    MediumCVSS 5.0WeaponizedEPSS 25%

    sun · solarisFeb 7, 2003

  • CVE-2003-0042
    34Monitor

    Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or ot

    MediumCVSS 5.0Proof of conceptEPSS 46%

    apache · tomcatFeb 7, 2003

  • CVE-2003-1326
    35Monitor

    Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model to run malicious script or arbitra

    HighCVSS 7.5No exploitEPSS 16%

    microsoft · ieFeb 19, 2003

  • CVE-2003-1328
    42Plan

    The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote at

    HighCVSS 7.5Proof of conceptEPSS 38%

    microsoft · ieFeb 19, 2003