Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2003-0016
HistorySep 01, 2004 - 4:00 a.m.

CVE-2003-0016

2004-09-0104:00:00
mitre
web.nvd.nist.gov
60
apache
cve-2003-0016
denial of service
windows
http request
vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.081

Percentile

94.4%

JSON

Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows remote attackers to cause a denial of service or execute arbitrary code via an HTTP request containing MS-DOS device names.

Affected configurations

Nvd
Node
apachehttp_serverMatch2.0.36
OR
apachehttp_serverMatch2.0.37
OR
apachehttp_serverMatch2.0.38
OR
apachehttp_serverMatch2.0.39
OR
apachehttp_serverMatch2.0.40
OR
apachehttp_serverMatch2.0.41
OR
apachehttp_serverMatch2.0.42
OR
apachehttp_serverMatch2.0.43
VendorProductVersionCPE
apachehttp_server2.0.36cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*
apachehttp_server2.0.37cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*
apachehttp_server2.0.38cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*
apachehttp_server2.0.39cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*
apachehttp_server2.0.40cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*
apachehttp_server2.0.41cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*
apachehttp_server2.0.42cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*
apachehttp_server2.0.43cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:*

References

Related

httpd 1
cert 2
cvelist 1
nessus 2
nvd 1
openvas 2
httpd
httpd
Apache Httpd < 2.0.44 : MS-DOS device name filtering
2002-12-04 00:00:00
cert
cert
Apache allows arbitrary code execution via crafted POST request containing MS-DOS device name
2003-02-12 00:00:00
Apache vulnerable to DoS via request for MS-DOS device
2003-02-12 00:00:00
cvelist
cvelist
CVE-2003-0016
2004-09-01 04:00:00
nessus
nessus
Apache < 2.0.44 DOS Device Name Multiple Remote Vulnerabilities (Code Exec, DoS)
2003-01-22 00:00:00
Multiple Web Server on Windows MS/DOS Device Request Remote DOS
2002-03-29 00:00:00
nvd
nvd
CVE-2003-0016
2003-02-07 05:00:00
openvas
openvas
HTTP Windows 98 MS/DOS device names DOS
2005-11-03 00:00:00
HTTP Windows 98 MS/DOS device names DOS
2005-11-03 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.081

Percentile

94.4%

JSON
Related for CVE-2003-0016
httpd1cert2cvelist1nessus2nvd1openvas2