Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2003

30 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2003-0469
    43Plan

    Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service

    HighCVSS 7.5Proof of conceptEPSS 44%

    microsoft · windows 2000Aug 7, 2003

  • CVE-2003-0471
    48Plan

    Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a lo

    HighCVSS 7.5WeaponizedEPSS 60%

    alt-n · webadminAug 7, 2003

  • CVE-2003-0478
    44Plan

    Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3)

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    bahamut · ircdAug 7, 2003

  • CVE-2003-0487
    33Monitor

    Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbit

    HighCVSS 7.5Proof of conceptEPSS 11%

    kerio · kerio mailserverAug 7, 2003

  • CVE-2003-0500
    45Plan

    SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers t

    CriticalCVSS 10.0Proof of conceptEPSS 18%

    proftpd project · proftpdAug 7, 2003

  • CVE-2003-0505
    24Monitor

    Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (

    MediumCVSS 5.0No exploitEPSS 13%

    microsoft · netmeetingAug 7, 2003

  • CVE-2003-0506
    23Monitor

    Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malfo

    MediumCVSS 5.0No exploitEPSS 10%

    microsoft · netmeetingAug 7, 2003

  • CVE-2003-0507
    38Monitor

    Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service (reboot) and

    HighCVSS 7.5No exploitEPSS 26%

    microsoft · windows 2000Aug 7, 2003

  • CVE-2001-1410
    35Monitor

    Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which c

    MediumCVSS 5.0Proof of conceptEPSS 50%

    microsoft · internet explorerAug 18, 2003

  • CVE-2003-0252
    44Plan

    Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a d

    CriticalCVSS 9.8No exploitEPSS 15%

    linux-nfs · nfs-utilsAug 18, 2003

  • CVE-2003-0345
    40Plan

    Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possib

    HighCVSS 7.5No exploitEPSS 34%

    microsoft · windows 2000Aug 18, 2003

  • CVE-2003-0352
    60This week

    Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execut

    HighCVSS 7.5WeaponizedEPSS 98%

    microsoft · windows 2000Aug 18, 2003

  • CVE-2003-0519
    23Monitor

    Certain versions of Internet Explorer 5 and 6, in certain Windows environments, allow remote attackers to cause a denial of service (freeze)

    MediumCVSS 5.0No exploitEPSS 10%

    microsoft · internet explorerAug 18, 2003

  • CVE-2003-0526
    34Monitor

    Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject

    MediumCVSS 6.8Proof of conceptEPSS 22%

    microsoft · isa serverAug 18, 2003

  • CVE-2003-0558
    47Plan

    Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request.

    HighCVSS 7.5WeaponizedEPSS 56%

    leapware · leapftpAug 18, 2003

  • CVE-2003-0567
    36Monitor

    Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence o

    HighCVSS 7.8Proof of conceptEPSS 16%

    cisco · iosAug 18, 2003

  • CVE-2003-0231
    31Monitor

    Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long re

    MediumCVSS 5.0Proof of conceptEPSS 36%

    microsoft · data engineAug 27, 2003

  • CVE-2003-0346
    40Plan

    Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a M

    HighCVSS 7.5No exploitEPSS 32%

    microsoft · directxAug 27, 2003

  • CVE-2003-0353
    37Monitor

    Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arb

    HighCVSS 7.5No exploitEPSS 21%

    microsoft · data access componentsAug 27, 2003

  • CVE-2003-0460
    24Monitor

    The rotatelogs program on Apache before 1.3.28, for Windows and OS/2 systems, does not properly ignore certain control characters that are r

    MediumCVSS 5.0No exploitEPSS 13%

    apache · http serverAug 27, 2003

  • CVE-2003-0466
    62This week

    Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code,

    CriticalCVSS 9.8Proof of conceptEPSS 78%

    redhat · wu ftpdAug 27, 2003

  • CVE-2003-0530
    39Monitor

    Buffer overflow in the BR549.DLL ActiveX control for Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to execute arbitrary

    HighCVSS 7.5No exploitEPSS 30%

    microsoft · ieAug 27, 2003

  • CVE-2003-0531
    38Monitor

    Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer domain using the browser

    HighCVSS 7.5No exploitEPSS 26%

    microsoft · ieAug 27, 2003

  • CVE-2003-0532
    37Monitor

    Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, which could allow remo

    HighCVSS 7.5No exploitEPSS 22%

    microsoft · ieAug 27, 2003

  • CVE-2003-0540
    26Monitor

    The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelo

    MediumCVSS 5.0Proof of conceptEPSS 21%

    wietse venema · postfixAug 27, 2003

  • CVE-2003-0562
    24Monitor

    Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denial of service (ABEND)

    MediumCVSS 5.0Proof of conceptEPSS 14%

    novell · netwareAug 27, 2003

  • CVE-2003-0604
    34Monitor

    Windows Media Player (WMP) 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote a

    HighCVSS 7.5No exploitEPSS 12%

    microsoft · windows media playerAug 27, 2003

  • CVE-2003-0605
    48Plan

    The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use

    HighCVSS 7.5Proof of conceptEPSS 58%

    microsoft · windows 2000Aug 27, 2003

  • CVE-2003-0619
    23Monitor

    Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of s

    MediumCVSS 5.0Proof of conceptEPSS 10%

    linux · linux kernelAug 27, 2003

  • CVE-2003-0701
    39Monitor

    Buffer overflow in Internet Explorer 6 SP1 for certain languages that support double-byte encodings (e.g., Japanese) allows remote attackers

    HighCVSS 7.5Proof of conceptEPSS 30%

    microsoft · ieAug 27, 2003