Search for vulnerabilities
Vulnerability details: VCID-em8a-nphs-aaac
Vulnerability ID VCID-em8a-nphs-aaac
Aliases CVE-2003-0245
Summary Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long strings, as demonstrated using XML objects to mod_dav, and possibly other vectors.
Status Published
Exploitability 2.0
Weighted Severity 7.0
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.85319 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.92588 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.92588 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.92588 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.96176 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.96176 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.96176 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.96176 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.96176 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.96176 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.96176 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.96176 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.96176 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
rhbs unspecified https://bugzilla.redhat.com/show_bug.cgi?id=1617006
apache_httpd critical https://httpd.apache.org/security/json/CVE-2003-0245.json
cvssv2 5.0 https://nvd.nist.gov/vuln/detail/CVE-2003-0245
Reference id Reference type URL
http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0095.html
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000661
http://marc.info/?l=bugtraq&m=105418115512559&w=2
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0245.json
https://api.first.org/data/v1/epss?cve=CVE-2003-0245
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0245
https://exchange.xforce.ibmcloud.com/vulnerabilities/12090
https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac@%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79@%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc@%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b@%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6@%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce@%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb@%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142@%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594@%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571@%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
http://www.apache.org/dist/httpd/Announcement2.html
http://www.idefense.com/advisory/05.30.03.txt
http://www.kb.cert.org/vuls/id/757612
http://www.mandriva.com/security/advisories?name=MDKSA-2003:063
http://www.redhat.com/support/errata/RHSA-2003-186.html
http://www.securityfocus.com/bid/7723
1617006 https://bugzilla.redhat.com/show_bug.cgi?id=1617006
cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*
cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*
cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*
cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*
cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*
cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*
cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:*
cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:*
cpe:2.3:a:apache:http_server:2.0.45:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:http_server:2.0.45:*:*:*:*:*:*:*
CVE-2003-0245 https://httpd.apache.org/security/json/CVE-2003-0245.json
CVE-2003-0245 https://nvd.nist.gov/vuln/detail/CVE-2003-0245
OSVDB-4340;CVE-2003-0245 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/38.pl
RHSA-2003:186 https://access.redhat.com/errata/RHSA-2003:186
Data source Exploit-DB
Date added June 7, 2003
Description Apache 2.0.45 - 'APR' Crash
Ransomware campaign use Known
Source publication date June 8, 2003
Exploit type dos
Platform linux
Source update date Nov. 22, 2017
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2003-0245
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.99313
EPSS Score 0.85319
Published At March 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.