CVE-2003-1159
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Plug & Play是一款集中HTTP/FTP/NEWS/MAIL/TELNET/DNS/DHCP/HTTP-PROXY服务的程序。 Plug & Play的代理服务对用户提交请求缺少正确处理，远程攻击者可以利用这个漏洞进行拒绝服务攻击。 攻击者只要提交类似"GET /asdf.? HTTP/1.0"的请求到8080端口的代理服务，就会导致代理服务停止响应，需要重新启动获得正常服务。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2003-1159
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Plug and Play Web Server Proxy 1.0002c allows remote attackers to cause a denial of service (server crash) via an invalid URI in an HTTP GET request to TCP port 8080.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Plug and Play Web Server远程拒绝服务攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Plug & Play是一款集中HTTP/FTP/NEWS/MAIL/TELNET/DNS/DHCP/HTTP-PROXY服务的程序。 Plug & Play的代理服务对用户提交请求缺少正确处理，远程攻击者可以利用这个漏洞进行拒绝服务攻击。 攻击者只要提交类似"GET /asdf.? HTTP/1.0"的请求到8080端口的代理服务，就会导致代理服务停止响应，需要重新启动获得正常服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2003-1159
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2003-1159
请登录查看更多情报信息。
Vendor Advisories for CVE-2003-1159 (4)
Mailing List Discussions for CVE-2003-1159 (1)
Same Patch Batch · n/a · 2005-05-10 · 360 CVEs total
| CVE-2004-1945 | Kinesphere Corporation Exchange POP3远程缓冲区溢出漏洞 | |
| CVE-2004-1956 | PostNuke Pheonix多个跨站脚本及路径泄露漏洞 | |
| CVE-2004-1955 | PHProfession多个漏洞 | |
| CVE-2004-1954 | PHProfession多个漏洞 | |
| CVE-2004-1953 | PHProfession多个漏洞 | |
| CVE-2004-1952 | Advanced Guestbook密码参数SQL注入漏洞 | |
| CVE-2004-1951 | Xine和Xine-Lib多个远程文件覆盖漏洞 | |
| CVE-2004-1950 | PHPBB Common.php IP欺骗地址漏洞 | |
| CVE-2004-1949 | PostNuke Phoenix多个模块SQL注入漏洞 | |
| CVE-2004-1948 | NcFTP本地信息泄露漏洞 | |
| CVE-2004-1947 | Softwin BitDefender AvxScanOnlineCtrl COM对象信息泄露漏洞 | |
| CVE-2004-1946 | Cherokee Web Server格式字符串漏洞 | |
| CVE-2004-1940 | KPhone Malformed STUN Packet拒绝服务漏洞 | |
| CVE-2004-1935 | SCT Campus Pipeline电子邮件附件脚本注入漏洞 | |
| CVE-2004-1936 | ZoneLabs ZoneAlarm Pro/Plus MailSafe过滤绕开漏洞 | |
| CVE-2004-1937 | Nuked-Klan多个漏洞 | |
| CVE-2004-1938 | Phorum Phorum_URIAuth远程SQL注入漏洞 | |
| CVE-2004-1939 | Rhino Software Zaep AntiSpam 跨站脚本漏洞 | |
| CVE-2004-1942 | Sun Solaris Patch信息泄露漏洞 | |
| CVE-2004-1944 | Qualcomm Eudora MIME消息嵌套服务拒绝漏洞 |
Showing top 20 of 360 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2003-1159
No comments yet