Unscored severity · published Dec 31, 2003
CVE-2003-0363
Format string vulnerability in LICQ 1.2.6, 1.0.3 and possibly other versions allows remote attackers to perform unknown actions via format string specifiers
–
CVSS
1.4%
EPSS
No
On KEV
Description
Format string vulnerability in LICQ 1.2.6, 1.0.3 and possibly other versions allows remote attackers to perform unknown actions via format string specifiers.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Licq · Licq
1.0.3; 1.2.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0363
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0363
Vendor Advisory
http://csdl.computer.org/comp/proceedings/hicss/2004/2056/09/205690277.pdf
More from Licq
–
CVE-2008-1996
licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor exhaustion and application crash) via a large number of connections
–
CVE-2002-0251
Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string of format string…
–
CVE-2001-0439
licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL
–
CVE-2001-0440
Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands