Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: October 2003

13 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2002-1567
    35Monitor

    Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via

    MediumCVSS 6.8Proof of conceptEPSS 27%

    apache · tomcatOct 6, 2003

  • CVE-2003-0681
    37Monitor

    A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) m

    HighCVSS 7.5Proof of conceptEPSS 22%

    sendmail · advanced message serverOct 6, 2003

  • CVE-2003-0694
    60This week

    The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using

    CriticalCVSS 10.0WeaponizedEPSS 66%

    sendmail · advanced message serverOct 6, 2003

  • CVE-2003-0801
    21Monitor

    Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute arbitrary web script

    MediumCVSS 4.3Proof of conceptEPSS 12%

    nokia · electronic documentationOct 6, 2003

  • CVE-2003-0826
    34Monitor

    lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c wh

    HighCVSS 7.5Proof of conceptEPSS 12%

    gnu · lshOct 6, 2003

  • CVE-2003-0347
    56Plan

    Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attack

    CriticalCVSS 10.0Proof of conceptEPSS 54%

    microsoft · officeOct 20, 2003

  • CVE-2003-0661
    28Monitor

    The NetBT Name Service (NBNS) for NetBIOS in Windows NT 4.0, 2000, XP, and Server 2003 may include random memory in a response to a NBNS que

    MediumCVSS 5.0No exploitEPSS 25%

    microsoft · windows 2000Oct 20, 2003

  • CVE-2003-0665
    39Monitor

    Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute

    HighCVSS 7.5Proof of conceptEPSS 30%

    microsoft · accessOct 20, 2003

  • CVE-2003-0666
    37Monitor

    Buffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary code via modified data offset and data size

    HighCVSS 7.5Proof of conceptEPSS 21%

    microsoft · wordperfect converterOct 20, 2003

  • CVE-2003-0686
    38Monitor

    Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute a

    HighCVSS 7.5Proof of conceptEPSS 26%

    dave airlie · pam smbOct 20, 2003

  • CVE-2003-0725
    45Plan

    Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal S

    HighCVSS 7.5Proof of conceptEPSS 48%

    realnetworks · helix universal serverOct 20, 2003

  • CVE-2003-0727
    40Plan

    Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of se

    LowCVSS 2.1WeaponizedEPSS 68%

    oracle · database serverOct 20, 2003

  • CVE-2003-0729
    33Monitor

    Buffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a TFTP request with a long filename.

    HighCVSS 7.5Proof of conceptEPSS 10%

    tellurian · tftpdntOct 20, 2003