Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: April 2003

18 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2002-1487
    24Monitor

    The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by sending the raw mess

    MediumCVSS 5.0Proof of conceptEPSS 13%

    cerulean studios · trillianApr 2, 2003

  • CVE-2002-1489
    33Monitor

    Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a

    HighCVSS 7.5Proof of conceptEPSS 10%

    planetdns · planetwebApr 2, 2003

  • CVE-2002-1496
    37Monitor

    Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via a negative value in t

    HighCVSS 7.5Proof of conceptEPSS 22%

    nulllogic · null httpdApr 2, 2003

  • CVE-2002-1522
    24Monitor

    Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly

    MediumCVSS 5.0Proof of conceptEPSS 13%

    cooolsoft · powerftpApr 2, 2003

  • CVE-2002-1561
    31Monitor

    The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service

    MediumCVSS 5.0Proof of conceptEPSS 37%

    microsoft · windows 2000Apr 2, 2003

  • CVE-2003-0083
    26Monitor

    Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could ma

    MediumCVSS 5.0No exploitEPSS 19%

    apache · http serverApr 2, 2003

  • CVE-2003-0161
    52Plan

    The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char

    CriticalCVSS 10.0Proof of conceptEPSS 38%

    sendmail · sendmailApr 2, 2003

  • CVE-2003-0166
    34Monitor

    Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption)

    HighCVSS 7.5Proof of conceptEPSS 14%

    php · phpApr 2, 2003

  • CVE-2003-0172
    36Monitor

    Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a c

    HighCVSS 7.5Proof of conceptEPSS 19%

    php · phpApr 2, 2003

  • CVE-2003-0178
    44Plan

    Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary c

    CriticalCVSS 10.0No exploitEPSS 14%

    ibm · lotus domino web serverApr 2, 2003

  • CVE-2002-1143
    36Monitor

    Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the

    MediumCVSS 5.0Proof of conceptEPSS 53%

    microsoft · excelApr 11, 2003

  • CVE-2002-1412
    42Plan

    Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY_BASEDIR

    HighCVSS 7.5Proof of conceptEPSS 39%

    gallery project · galleryApr 11, 2003

  • CVE-2002-1417
    25Monitor

    Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6

    MediumCVSS 5.0No exploitEPSS 16%

    novell · small business suiteApr 11, 2003

  • CVE-2002-1426
    37Monitor

    HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service (crash) via an SNMP write request containing 85 charac

    HighCVSS 7.8Proof of conceptEPSS 19%

    hp · procurve switch 4000mApr 11, 2003

  • CVE-2002-1437
    25Monitor

    Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbi

    MediumCVSS 5.0No exploitEPSS 17%

    novell · netwareApr 11, 2003

  • CVE-2003-0132
    46Plan

    A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of lin

    MediumCVSS 5.0Proof of conceptEPSS 86%

    apache · http serverApr 11, 2003

  • CVE-2002-1473
    40Plan

    Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of service and possibly ex

    MediumCVSS 4.6WeaponizedEPSS 4%

    hp · hp-uxApr 22, 2003

  • CVE-2002-1484
    43Plan

    DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections t

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    siemens · db4webApr 22, 2003