Search for vulnerabilities
Vulnerability details: VCID-tp76-7rdf-7yhw
Vulnerability ID VCID-tp76-7rdf-7yhw
Aliases CVE-2003-0245
Summary A vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long strings, as demonstrated using XML objects to mod_dav, and possibly other vectors.
Status Published
Exploitability 2.0
Weighted Severity 7.0
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.78915 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.78915 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.78915 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.78915 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.78915 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.78915 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.78915 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.78915 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.78915 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.78915 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.78915 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.78915 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
epss 0.78915 https://api.first.org/data/v1/epss?cve=CVE-2003-0245
apache_httpd critical https://httpd.apache.org/security/json/CVE-2003-0245.json
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0245.json
https://api.first.org/data/v1/epss?cve=CVE-2003-0245
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0245
1617006 https://bugzilla.redhat.com/show_bug.cgi?id=1617006
CVE-2003-0245 https://httpd.apache.org/security/json/CVE-2003-0245.json
OSVDB-4340;CVE-2003-0245 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/38.pl
RHSA-2003:186 https://access.redhat.com/errata/RHSA-2003:186
Data source Exploit-DB
Date added June 7, 2003
Description Apache 2.0.45 - 'APR' Crash
Ransomware campaign use Known
Source publication date June 8, 2003
Exploit type dos
Platform linux
Source update date Nov. 22, 2017
Exploit Prediction Scoring System (EPSS)
Percentile 0.99003
EPSS Score 0.78915
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:28:40.840888+00:00 Apache HTTPD Importer Import https://httpd.apache.org/security/json/CVE-2003-0245.json 37.0.0