CVE-2003-0412

CWE-2224 documents4 sources
Severity
5.0MEDIUM
EPSS
1.1%
top 22.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SUN ONE Application Server
Timeline
PublishedJun 30
Latest updateApr 29

Description

Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could allow remote attackers to hide malicious activities.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: sunsolve.sun.com ↗Patch: www.ciac.org ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-gj6g-3m57-qv5h: Sun ONE Application Server 7↗2022-04-29
▶
CVEList
CVE-2003-0412: Sun ONE Application Server 7↗2003-06-11
▶

📐Framework References

1
CWE
Truncation of Security-relevant Information
▶
CVE-2003-0412 (MEDIUM CVSS 5) | Sun ONE Application Server 7.0 for | cvebase.io