Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: March 2003

26 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2002-0842
    34Monitor

    Format string vulnerability in certain third party modifications to mod_dav for logging bad gateway messages (e.g.

    HighCVSS 7.5No exploitEPSS 14%

    oracle · application serverMar 3, 2003

  • CVE-2003-0078
    24Monitor

    ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block ciphe

    MediumCVSS 5.0Proof of conceptEPSS 13%

    openssl · opensslMar 3, 2003

  • CVE-2003-0095
    44Plan

    Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a lo

    CriticalCVSS 10.0No exploitEPSS 13%

    oracle · database serverMar 3, 2003

  • CVE-2003-0096
    41Plan

    Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code

    CriticalCVSS 9.0No exploitEPSS 15%

    oracle · database serverMar 3, 2003

  • CVE-2003-0101
    45Plan

    miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage

    CriticalCVSS 10.0Proof of conceptEPSS 15%

    usermin · userminMar 3, 2003

  • CVE-2002-1337
    62This week

    Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related t

    CriticalCVSS 10.0Proof of conceptEPSS 72%

    sendmail · sendmailMar 7, 2003

  • CVE-2003-0009
    32Monitor

    Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary sc

    MediumCVSS 6.8Proof of conceptEPSS 16%

    microsoft · windows meMar 7, 2003

  • CVE-2003-0033
    44Plan

    Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmente

    CriticalCVSS 10.0No exploitEPSS 11%

    snort · snortMar 7, 2003

  • CVE-2003-0050
    51Plan

    parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute

    HighCVSS 7.5WeaponizedEPSS 68%

    apple · darwin streaming serverMar 7, 2003

  • CVE-2003-0107
    38Monitor

    Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnp

    HighCVSS 7.5Proof of conceptEPSS 25%

    zlib · zlibMar 7, 2003

  • CVE-2003-0108
    23Monitor

    isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed

    MediumCVSS 5.0Proof of conceptEPSS 11%

    lbl · tcpdumpMar 7, 2003

  • CVE-2003-0020
    25Monitor

    Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences int

    MediumCVSS 5.0No exploitEPSS 16%

    apache · http serverMar 18, 2003

  • CVE-2003-0122
    23Monitor

    Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via

    MediumCVSS 5.0No exploitEPSS 10%

    ibm · lotus dominoMar 18, 2003

  • CVE-2003-0125
    23Monitor

    Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a denial of service (reb

    MediumCVSS 5.0Proof of conceptEPSS 10%

    multitech · routefinder 550 vpnMar 18, 2003

  • CVE-2003-0010
    37Monitor

    Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating sy

    HighCVSS 7.5No exploitEPSS 23%

    microsoft · windows 2000Mar 24, 2003

  • CVE-2003-0011
    24Monitor

    Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 a

    MediumCVSS 5.0No exploitEPSS 13%

    microsoft · isa serverMar 24, 2003

  • CVE-2003-0128
    25Monitor

    The try_uudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denia

    MediumCVSS 5.0Proof of conceptEPSS 16%

    ximian · evolutionMar 24, 2003

  • CVE-2003-0129
    23Monitor

    Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (memory consumption) via a mail mess

    MediumCVSS 5.0Proof of conceptEPSS 11%

    ximian · evolutionMar 24, 2003

  • CVE-2003-0130
    23Monitor

    The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters,

    MediumCVSS 5.0Proof of conceptEPSS 10%

    ximian · evolutionMar 24, 2003

  • CVE-2003-0150
    49Plan

    MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE"

    CriticalCVSS 9.0Proof of conceptEPSS 44%

    oracle · mysqlMar 24, 2003

  • CVE-2003-0028
    35Monitor

    Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived fr

    HighCVSS 7.5No exploitEPSS 15%

    gnu · glibcMar 25, 2003

  • CVE-2002-1542
    24Monitor

    SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly tr

    MediumCVSS 5.0Proof of conceptEPSS 13%

    solarwinds · tftp serverMar 31, 2003

  • CVE-2002-1549
    33Monitor

    Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.

    HighCVSS 7.5Proof of conceptEPSS 11%

    light httpd · light httpdMar 31, 2003

  • CVE-2002-1560
    43Plan

    index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    martin bauer · gbookMar 31, 2003

  • CVE-2003-0085
    66This week

    Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, al

    CriticalCVSS 10.0Proof of conceptEPSS 86%

    samba · sambaMar 31, 2003

  • CVE-2003-0109
    56Plan

    Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote

    HighCVSS 7.5WeaponizedEPSS 85%

    microsoft · windows 2000Mar 31, 2003