CVE-2003-0110
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft ISA服务器集成可扩展，多层企业级防火墙，可扩展高性能WEB缓冲服务程序。MS Proxy是ISA服务器的前身。 Microsoft代理服务器不正确处理部分畸形包请求，远程攻击者可以利用这个漏洞对代理服务程序进行拒绝服务攻击。 ISA Server和MS Proxy 2.0默认安装WinSock代理服务wspsrv.exe，设计用于测试和诊断用途。WSP服务建立UDP协议套接口绑定在1745端口，攻击者发送特殊构建的包可以导致WSP产生无限循环，消耗大量CPU时间，停止对正常服务的响应
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2003-0110
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Server 2000 allow remote attackers to cause a denial of service (CPU consumption or packet storm) via a spoofed, malformed packet to UDP port 1745.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Winsock代理服务远程拒绝服务攻击漏洞(MS03-012)
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft ISA服务器集成可扩展，多层企业级防火墙，可扩展高性能WEB缓冲服务程序。MS Proxy是ISA服务器的前身。 Microsoft代理服务器不正确处理部分畸形包请求，远程攻击者可以利用这个漏洞对代理服务程序进行拒绝服务攻击。 ISA Server和MS Proxy 2.0默认安装WinSock代理服务wspsrv.exe，设计用于测试和诊断用途。WSP服务建立UDP协议套接口绑定在1745端口，攻击者发送特殊构建的包可以导致WSP产生无限循环，消耗大量CPU时间，停止对正常服务的响应
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2003-0110
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2003-0110
请登录查看更多情报信息。
Vendor Advisories for CVE-2003-0110 (2)
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-012 vendor-advisory x_refsource_MS
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A406 vdb-entry signature x_refsource_OVAL
Mailing List Discussions for CVE-2003-0110 (1)
Other References for CVE-2003-0110 (1)
-
http://www.idefense.com/advisory/04.09.03.txt x_refsource_MISC
Same Patch Batch · n/a · 2003-04-15 · 13 CVEs total
| CVE-2003-0111 | Microsoft Java虚拟机任意代码执行漏洞(MS03-011) | |
| CVE-2003-0133 | GTKHTML Malformed HTML文件服务拒绝漏洞 | |
| CVE-2003-0136 | LPRng PSBanner以不安全方式建立临时文件漏洞 | |
| CVE-2003-0163 | Gaim-Encryption远程堆破坏漏洞 | |
| CVE-2003-0171 | Apple MacOS X DirectoryService权限提升漏洞 | |
| CVE-2003-0173 | SGI XFSDump Quotas文件符号链接漏洞 | |
| CVE-2003-0196 | Samba多个未明远程缓冲区溢出漏洞 | |
| CVE-2003-0198 | Apple MacOS X DropBox文件夹远程信息泄露漏洞 | |
| CVE-2003-0201 | Samba服务器call_trans2open远程缓冲区溢出漏洞 | |
| CVE-2003-0204 | KDE Postscript/PDF文件处理任意命令执行漏洞 | |
| CVE-2003-0207 | ps2epsi创建不安全临时文件漏洞 | |
| CVE-2003-0208 | Macromedia Flash ad用户跟踪性能跨站脚本（XSS）漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-94043
Free5GC Gmm handler.go race condition -
CVE-2026-94030
SerenityOS LibGfx BMPLoader.cpp decode_bmp_pixel_data intege -
CVE-2026-94004
DedeCMS mytag_js.php code injection -
CVE-2026-93962
Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-ba -
CVE-2026-93960
Pixelfed OAuth Scope ApiV1Controller.php instancePeers missi
V. Comments for CVE-2003-0110
No comments yet