По дате публикации
Эксплуатируемые и новые серьёзные CVE: апрель 2003 г.
18 записей · 0 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
24Наблюдать | CVE-2002-1487Proof of concept | The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by sending the raw messcerulean studios · trillian | Средняя5,0 | — | 13,6 % | 2 апр. 2003 г. |
33Наблюдать | CVE-2002-1489Proof of concept | Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTTP GET request with aplanetdns · planetweb | Высокая7,5 | — | 10,5 % | 2 апр. 2003 г. |
37Наблюдать | CVE-2002-1496Proof of concept | Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via a negative value in tnulllogic · null httpd | Высокая7,5 | — | 22,5 % | 2 апр. 2003 г. |
24Наблюдать | CVE-2002-1522Proof of concept | Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly cooolsoft · powerftp | Средняя5,0 | — | 13,6 % | 2 апр. 2003 г. |
31Наблюдать | CVE-2002-1561Proof of concept | The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC servicemicrosoft · windows 2000 | Средняя5,0 | — | 37,7 % | 2 апр. 2003 г. |
26Наблюдать | CVE-2003-0083Эксплойта нет | Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could maapache · http server | Средняя5,0 | — | 19,1 % | 2 апр. 2003 г. |
52В плане | CVE-2003-0161Proof of concept | The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char sendmail · sendmail | Критическая10,0 | — | 38,7 % | 2 апр. 2003 г. |
34Наблюдать | CVE-2003-0166Proof of concept | Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption)php · php | Высокая7,5 | — | 14,1 % | 2 апр. 2003 г. |
36Наблюдать | CVE-2003-0172Proof of concept | Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a cphp · php | Высокая7,5 | — | 19,0 % | 2 апр. 2003 г. |
44В плане | CVE-2003-0178Эксплойта нет | Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary cibm · lotus domino web server | Критическая10,0 | — | 14,9 % | 2 апр. 2003 г. |
36Наблюдать | CVE-2002-1143Proof of concept | Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the microsoft · excel | Средняя5,0 | — | 53,5 % | 11 апр. 2003 г. |
42В плане | CVE-2002-1412Proof of concept | Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY_BASEDIRgallery project · gallery | Высокая7,5 | — | 39,4 % | 11 апр. 2003 г. |
25Наблюдать | CVE-2002-1417Эксплойта нет | Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6novell · small business suite | Средняя5,0 | — | 16,6 % | 11 апр. 2003 г. |
37Наблюдать | CVE-2002-1426Proof of concept | HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service (crash) via an SNMP write request containing 85 charachp · procurve switch 4000m | Высокая7,8 | — | 19,6 % | 11 апр. 2003 г. |
25Наблюдать | CVE-2002-1437Эксплойта нет | Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbinovell · netware | Средняя5,0 | — | 17,0 % | 11 апр. 2003 г. |
46В плане | CVE-2003-0132Proof of concept | A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linapache · http server · CWE-772 | Средняя5,0 | — | 86,6 % | 11 апр. 2003 г. |
40В плане | CVE-2002-1473Готовый эксплойт | Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of service and possibly exhp · hp-ux | Средняя4,6 | — | 4,5 % | 22 апр. 2003 г. |
43В плане | CVE-2002-1484Proof of concept | DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections tsiemens · db4web · CWE-918 | Критическая9,8 | — | 13,6 % | 22 апр. 2003 г. |
- CVE-2002-148724Наблюдать
The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by sending the raw mess
СредняяCVSS 5,0Proof of conceptEPSS 13 %cerulean studios · trillian2 апр. 2003 г.
- CVE-2002-148933Наблюдать
Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a
ВысокаяCVSS 7,5Proof of conceptEPSS 10 %planetdns · planetweb2 апр. 2003 г.
- CVE-2002-149637Наблюдать
Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via a negative value in t
ВысокаяCVSS 7,5Proof of conceptEPSS 22 %nulllogic · null httpd2 апр. 2003 г.
- CVE-2002-152224Наблюдать
Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly
СредняяCVSS 5,0Proof of conceptEPSS 13 %cooolsoft · powerftp2 апр. 2003 г.
- CVE-2002-156131Наблюдать
The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service
СредняяCVSS 5,0Proof of conceptEPSS 37 %microsoft · windows 20002 апр. 2003 г.
- CVE-2003-008326Наблюдать
Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could ma
СредняяCVSS 5,0Эксплойта нетEPSS 19 %apache · http server2 апр. 2003 г.
- CVE-2003-016152В плане
The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char
КритическаяCVSS 10,0Proof of conceptEPSS 38 %sendmail · sendmail2 апр. 2003 г.
- CVE-2003-016634Наблюдать
Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption)
ВысокаяCVSS 7,5Proof of conceptEPSS 14 %php · php2 апр. 2003 г.
- CVE-2003-017236Наблюдать
Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a c
ВысокаяCVSS 7,5Proof of conceptEPSS 19 %php · php2 апр. 2003 г.
- CVE-2003-017844В плане
Multiple buffer overflows in Lotus Domino Web Server before 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary c
КритическаяCVSS 10,0Эксплойта нетEPSS 14 %ibm · lotus domino web server2 апр. 2003 г.
- CVE-2002-114336Наблюдать
Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the
СредняяCVSS 5,0Proof of conceptEPSS 53 %microsoft · excel11 апр. 2003 г.
- CVE-2002-141242В плане
Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY_BASEDIR
ВысокаяCVSS 7,5Proof of conceptEPSS 39 %gallery project · gallery11 апр. 2003 г.
- CVE-2002-141725Наблюдать
Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6
СредняяCVSS 5,0Эксплойта нетEPSS 16 %novell · small business suite11 апр. 2003 г.
- CVE-2002-142637Наблюдать
HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service (crash) via an SNMP write request containing 85 charac
ВысокаяCVSS 7,8Proof of conceptEPSS 19 %hp · procurve switch 4000m11 апр. 2003 г.
- CVE-2002-143725Наблюдать
Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbi
СредняяCVSS 5,0Эксплойта нетEPSS 17 %novell · netware11 апр. 2003 г.
- CVE-2003-013246В плане
A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of lin
СредняяCVSS 5,0Proof of conceptEPSS 86 %apache · http server11 апр. 2003 г.
- CVE-2002-147340В плане
Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of service and possibly ex
СредняяCVSS 4,6Готовый эксплойтEPSS 4 %hp · hp-ux22 апр. 2003 г.
- CVE-2002-148443В плане
DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections t
КритическаяCVSS 9,8Proof of conceptEPSS 13 %siemens · db4web22 апр. 2003 г.