By publication date
Exploited and new serious CVEs: September 2003
9 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
52Plan | CVE-2003-0528No exploit | Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to executmicrosoft · windows 2000 | Critical10.0 | — | 41.0% | Sep 17, 2003 |
52Plan | CVE-2003-0715No exploit | Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to executmicrosoft · windows 2000 | Critical10.0 | — | 40.3% | Sep 17, 2003 |
34Monitor | CVE-2003-0720Proof of concept | Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type.university of washington · pine | High7.5 | — | 12.8% | Sep 17, 2003 |
43Plan | CVE-2003-0693No exploit | A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code bopenbsd · openssh | Critical10.0 | — | 11.4% | Sep 22, 2003 |
67This week | CVE-2003-0722Weaponized | The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solsticsun · solaris | Critical10.0 | — | 88.7% | Sep 22, 2003 |
31Monitor | CVE-2003-0768No exploit | Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null chmicrosoft · asp.net | Medium6.8 | — | 12.9% | Sep 22, 2003 |
33Monitor | CVE-2003-0770Proof of concept | FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, wikonboard.com · ikonboard | High7.5 | — | 11.0% | Sep 22, 2003 |
55Plan | CVE-2003-0772Proof of concept | Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary codipswitch · ws ftp server | High7.5 | — | 84.8% | Sep 22, 2003 |
60This week | CVE-2003-0780Proof of concept | Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privilmysql · mysql | Critical9.0 | — | 78.3% | Sep 22, 2003 |
- CVE-2003-052852Plan
Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execut
CriticalCVSS 10.0No exploitEPSS 41%microsoft · windows 2000Sep 17, 2003
- CVE-2003-071552Plan
Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execut
CriticalCVSS 10.0No exploitEPSS 40%microsoft · windows 2000Sep 17, 2003
- CVE-2003-072034Monitor
Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type.
HighCVSS 7.5Proof of conceptEPSS 12%university of washington · pineSep 17, 2003
- CVE-2003-069343Plan
A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code b
CriticalCVSS 10.0No exploitEPSS 11%openbsd · opensshSep 22, 2003
- CVE-2003-072267This week
The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstic
CriticalCVSS 10.0WeaponizedEPSS 88%sun · solarisSep 22, 2003
- CVE-2003-076831Monitor
Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null ch
MediumCVSS 6.8No exploitEPSS 12%microsoft · asp.netSep 22, 2003
- CVE-2003-077033Monitor
FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, w
HighCVSS 7.5Proof of conceptEPSS 11%ikonboard.com · ikonboardSep 22, 2003
- CVE-2003-077255Plan
Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary cod
HighCVSS 7.5Proof of conceptEPSS 84%ipswitch · ws ftp serverSep 22, 2003
- CVE-2003-078060This week
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privil
CriticalCVSS 9.0Proof of conceptEPSS 78%mysql · mysqlSep 22, 2003