CVE-2003-0132

CVE-2003-0132

Published · Updated

45Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 87%
from disclosure to weapon6 days
Published on NVDApr 3
1st PoC+6d
exploitation probability
87%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
2 products
Red Hat Linux 8.0 · Red Hat Linux 9
fix ↗
A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache to allocate 80 bytes for each linefeed.
Affected products
n/a · n/a
public PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/11
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://lists.apple.com/mhonarc/security-announce/msg00028.htmlhttp://marc.info/?l=bugtraq&m=104931360606484&w=2http://marc.info/?l=bugtraq&m=104982175321731&w=2http://marc.info/?l=bugtraq&m=104994239010517&w=2http://marc.info/?l=bugtraq&m=104994309010974&w=2http://marc.info/?l=bugtraq&m=105001663120995&w=2http://marc.info/?l=bugtraq&m=105013378320711&w=2http://secunia.com/advisories/34920http://secunia.com/advisories/8499https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E