Unscored severity · published Nov 17, 2003
CVE-2003-0845
Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct…
–
CVSS
15.4%
EPSS
No
On KEV
Description
Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct unauthorized activities and possibly execute arbitrary code via certain SQL statements to (1) TCP port 1701 in JBoss 3.2.1, and (2) port 1476 in JBoss 3.0.8.
Exploitation
Is it being used?
Exploit prediction (EPSS)15.4% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JB
Jboss · Jboss
3.0.8; 3.2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0845
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0845
Mailing List
http://marc.info/?l=bugtraq&m=106546044416498&w=2
Mailing List
http://marc.info/?l=bugtraq&m=106547728803252&w=2
Not Applicable
http://secunia.com/advisories/27914
Broken Link
http://sourceforge.net/docman/display_doc.php?docid=19314&group_id=22866
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-1048.html
Patch
http://www.securityfocus.com/bid/8773
More from Jboss
–
CVE-2007-1157
Cross-site request forgery (CSRF) vulnerability in jmx-console/HtmlAdaptor in JBoss allows remote attackers to perform privileged actions as administrators via certain MBean…
–
CVE-2005-2006
JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive information via a GET request (1) with a "%." (percent dot), which reveals the installation path or…