CVE-2003-0845

N/A Unknown
Published: November 17, 2003 Modified: April 16, 2026
View on NVD

Description

Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct unauthorized activities and possibly execute arbitrary code via certain SQL statements to (1) TCP port 1701 in JBoss 3.2.1, and (2) port 1476 in JBoss 3.0.8.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://marc.info/?l=bugtraq&m=106546044416498&w=2
Source: cve@mitre.org
Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=106547728803252&w=2
Source: cve@mitre.org
Mailing List Third Party Advisory
http://secunia.com/advisories/27914
Source: cve@mitre.org
Not Applicable
http://www.redhat.com/support/errata/RHSA-2007-1048.html
Source: cve@mitre.org
Third Party Advisory
http://www.securityfocus.com/bid/8773
Source: cve@mitre.org
Patch Third Party Advisory VDB Entry Vendor Advisory
http://marc.info/?l=bugtraq&m=106546044416498&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List Third Party Advisory
http://marc.info/?l=bugtraq&m=106547728803252&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List Third Party Advisory
http://secunia.com/advisories/27914
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
http://sourceforge.net/docman/display_doc.php?docid=19314&group_id=22866
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://www.redhat.com/support/errata/RHSA-2007-1048.html
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.securityfocus.com/bid/8773
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Third Party Advisory VDB Entry Vendor Advisory

14 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
16.7%
95th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

jboss