Red Hat Security Advisories · March 2003 — Red Hat Security Advisories
24 RHSAs 33 CVEs 3 EXPLOITED

Red Hat Security Response Team errata for 2003-03. Mirrored into Vulnetix VDB with downloadable CSAF.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). Each row also links to the raw CSAF document stored on the Vulnetix artefact mirror. 3 are already weaponised in the wild: see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

RHSA-2003:103

ExploitedVulnCheck KEV listedHIGH2003-03-21

Red Hat Security Advisory: kernel security update

CVEs:CVE-2003-0127GSD-2003-0127

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
CSAF Red Hat errata

RHSA-2003:098

ExploitedVulnCheck KEV listedHIGH2003-03-17

Red Hat Security Advisory: : Updated 2.4 kernel fixes vulnerability

CVEs:CVE-2003-0127GSD-2003-0127

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
CSAF Red Hat errata

RHSA-2003:096

Active exploitation (sightings)HIGH2003-03-20

Red Hat Security Advisory: samba security update

CVEs:CVE-2003-0085CVE-2003-0086CVE-2003-1332

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:095

Active exploitation (sightings)HIGH2003-03-18

Red Hat Security Advisory: : New samba packages fix security vulnerabilities

CVEs:CVE-2003-0085CVE-2003-0086

Affected products

ProductStatusVendorPackage
Red Hat Linux 6.2 fixed Red Hat Red Hat Linux 6.2
Red Hat Linux 7.0 fixed Red Hat Red Hat Linux 7.0
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
Red Hat Linux 9 fixed Red Hat Red Hat Linux 9
CSAF Red Hat errata

RHSA-2003:074

PoC exploitCRITICAL2003-03-03

Red Hat Security Advisory: sendmail security update

CVEs:CVE-2002-1337

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:073

PoC exploitCRITICAL2003-03-03

Red Hat Security Advisory: : Updated sendmail packages fix critical security issues

CVEs:CVE-2002-1165CVE-2002-1337

Affected products

ProductStatusVendorPackage
Red Hat Linux 6.2 fixed Red Hat Red Hat Linux 6.2
Red Hat Linux 7.0 fixed Red Hat Red Hat Linux 7.0
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
CSAF Red Hat errata

RHSA-2003:120

PoC exploitCRITICAL2003-03-31

Red Hat Security Advisory: : Updated sendmail packages fix vulnerability

CVEs:CVE-2003-0161

Affected products

ProductStatusVendorPackage
Red Hat Linux 6.2 fixed Red Hat Red Hat Linux 6.2
Red Hat Linux 7.0 fixed Red Hat Red Hat Linux 7.0
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
Red Hat Linux 9 fixed Red Hat Red Hat Linux 9
CSAF Red Hat errata

RHSA-2003:121

PoC exploitCRITICAL2003-03-31

Red Hat Security Advisory: sendmail security update

CVEs:CVE-2003-0161

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:052

PoC exploitHIGH2003-03-27

Red Hat Security Advisory: krb5 security update

CVEs:CVE-2002-0036CVE-2003-0028CVE-2003-0058CVE-2003-0059CVE-2003-0072CVE-2003-0082CVE-2003-0138CVE-2003-0139CVE-2004-0772

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:051

PoC exploitHIGH2003-03-26

Red Hat Security Advisory: : Updated kerberos packages fix various vulnerabilities

CVEs:CVE-2002-0036CVE-2003-0028CVE-2003-0058CVE-2003-0059CVE-2003-0072CVE-2003-0082CVE-2003-0138CVE-2003-0139

Affected products

ProductStatusVendorPackage
Red Hat Linux 6.2 fixed Red Hat Red Hat Linux 6.2
Red Hat Linux 7.0 fixed Red Hat Red Hat Linux 7.0
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
CSAF Red Hat errata

RHSA-2003:089

PoC exploitCRITICAL2003-03-19

Red Hat Security Advisory: : Updated glibc packages fix vulnerabilities in RPC XDR decoder

CVEs:CVE-2003-0028

Affected products

ProductStatusVendorPackage
Red Hat Linux 6.2 fixed Red Hat Red Hat Linux 6.2
Red Hat Linux 7.0 fixed Red Hat Red Hat Linux 7.0
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
CSAF Red Hat errata

RHSA-2003:102

PoC exploitNONE2003-03-31

Red Hat Security Advisory: openssl security update

CVEs:CVE-2003-0131CVE-2003-0147

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:063

EPSS <= 49%HIGH2003-03-10

Red Hat Security Advisory: openssl security update

CVEs:CVE-2003-0078

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:062

EPSS <= 49%HIGH2003-03-06

Red Hat Security Advisory: : Updated OpenSSL packages fix timing attack

CVEs:CVE-2003-0078

Affected products

ProductStatusVendorPackage
Red Hat Linux 6.2 fixed Red Hat Red Hat Linux 6.2
Red Hat Linux 7.0 fixed Red Hat Red Hat Linux 7.0
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
CSAF Red Hat errata

RHSA-2003:085

EPSS <= 49%HIGH2003-03-11

Red Hat Security Advisory: tcpdump security update

CVEs:CVE-2003-0108

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:061

EPSS <= 49%CRITICAL2003-03-31

Red Hat Security Advisory: netpbm security update

CVEs:CVE-2003-0146

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:055

EPSS <= 49%CRITICAL2003-03-11

Red Hat Security Advisory: rxvt security update

CVEs:CVE-2003-0022CVE-2003-0023CVE-2003-0066

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:087

EPSS <= 49%CRITICAL2003-03-10

Red Hat Security Advisory: file security update

CVEs:CVE-2003-0102

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:086

EPSS <= 49%CRITICAL2003-03-07

Red Hat Security Advisory: : : : Updated file packages fix vulnerability

CVEs:CVE-2003-0102

Affected products

ProductStatusVendorPackage
Red Hat Linux 6.2 fixed Red Hat Red Hat Linux 6.2
Red Hat Linux 7.0 fixed Red Hat Red Hat Linux 7.0
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
CSAF Red Hat errata

RHSA-2003:028

EPSS <= 49%HIGH2003-03-05

Red Hat Security Advisory: pam security update

CVEs:CVE-2002-1160

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.