CVE-2003-0412
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Windows 2000/XP平台的Sun ONE Application Server 7.0没有记录超长HTTP请求的完整URI，远程攻击者可以利用该漏洞隐藏恶意活动。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2003-0412
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could allow remote attackers to hide malicious activities.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Sun One Application Server请求记录绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Windows 2000/XP平台的Sun ONE Application Server 7.0没有记录超长HTTP请求的完整URI，远程攻击者可以利用该漏洞隐藏恶意活动。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2003-0412
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2003-0412
请登录查看更多情报信息。
Vendor Advisories for CVE-2003-0412 (1)
Mailing List Discussions for CVE-2003-0412 (1)
-
🔗 'Multiple Vulnerabilities in Sun-One Application Server' - MARC Read full article mailing-list x_refsource_BUGTRAQ
Other References for CVE-2003-0412 (4)
-
http://www.spidynamics.com/sunone_alert.html x_refsource_MISC
-
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity vendor-advisory x_refsource_SUNALERT
-
http://www.ciac.org/ciac/bulletins/n-103.shtml third-party-advisory government-resource x_refsource_CIAC
-
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1 vendor-advisory x_refsource_SUNALERT
Same Patch Batch · n/a · 2003-06-11 · 21 CVEs total
| CVE-2003-0407 | Batalla Naval远程缓冲区溢出漏洞 | |
| CVE-2003-0417 | Super-M Son hServer文件泄露漏洞 | |
| CVE-2003-0416 | Bandmin跨站脚本攻击（XSS）漏洞 | |
| CVE-2003-0415 | Remote PC Access拒绝服务漏洞 | |
| CVE-2003-0414 | Sun ONE Application Server纯文本密码漏洞 | |
| CVE-2003-0413 | Sun ONE Application Server错误消息跨站脚本攻击（XSS）漏洞 | |
| CVE-2003-0411 | Sun ONE Application Server源泄露漏洞 | |
| CVE-2003-0410 | AnalogX Proxy URI缓冲区溢出漏洞 | |
| CVE-2003-0409 | BRS WebWeaver POST及HEAD拒绝服务漏洞 | |
| CVE-2003-0408 | Upclient本地缓冲区溢出漏洞 | |
| CVE-2003-0397 | FastTrack P2P超节点数据包处理缓冲区溢出漏洞 | |
| CVE-2003-0406 | PalmVNC本地明文存储口令漏洞 | |
| CVE-2003-0405 | Vignette NEEDS命令TCL代码注入漏洞 | |
| CVE-2003-0404 | Vignette多个跨站脚本攻击（XSS）漏洞 | |
| CVE-2003-0403 | Vignette许可证模板拒绝服务漏洞 | |
| CVE-2003-0402 | Vignette登录模板用户信息泄露漏洞 | |
| CVE-2003-0401 | Vignette Style模板信息泄露漏洞 | |
| CVE-2003-0400 | Vignette内存泄露漏洞 | |
| CVE-2003-0399 | Vignette未认证传统工具访问漏洞 | |
| CVE-2003-0398 | Vignette SSI注入漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-94043
Free5GC Gmm handler.go race condition -
CVE-2026-94030
SerenityOS LibGfx BMPLoader.cpp decode_bmp_pixel_data intege -
CVE-2026-94004
DedeCMS mytag_js.php code injection -
CVE-2026-93962
Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-ba -
CVE-2026-93960
Pixelfed OAuth Scope ApiV1Controller.php instancePeers missi
V. Comments for CVE-2003-0412
No comments yet