Red Hat Security Advisories · July 2003 — Red Hat Security Advisories
26 RHSAs 55 CVEs 1 EXPLOITED

Red Hat Security Response Team errata for 2003-07. Mirrored into Vulnetix VDB with downloadable CSAF.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). Each row also links to the raw CSAF document stored on the Vulnetix artefact mirror. 1 is already weaponised in the wild: see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

RHSA-2003:222

Weaponized exploitNONE2003-07-29

Red Hat Security Advisory: : Updated openssh packages available

CVEs:CVE-2003-0190

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
Red Hat Linux 9 fixed Red Hat Red Hat Linux 9
CSAF Red Hat errata

RHSA-2003:224

Weaponized exploitNONE2003-07-29

Red Hat Security Advisory: openssh security update

CVEs:CVE-2003-0190

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:245

PoC exploitCRITICAL2003-07-31

Red Hat Security Advisory: : Updated wu-ftpd packages fix remote vulnerability.

CVEs:CVE-2003-0466

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
CSAF Red Hat errata

RHSA-2003:246

PoC exploitCRITICAL2003-07-31

Red Hat Security Advisory: wu-ftpd security update

CVEs:CVE-2003-0466

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:200

PoC exploitCRITICAL2003-07-01

Red Hat Security Advisory: unzip security update

CVEs:CVE-2003-0282

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:199

PoC exploitCRITICAL2003-07-01

Red Hat Security Advisory: : Updated unzip packages fix trojan vulnerability

CVEs:CVE-2003-0282

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
Red Hat Linux 9 fixed Red Hat Red Hat Linux 9
CSAF Red Hat errata

RHSA-2003:206

PoC exploitCRITICAL2003-07-14

Red Hat Security Advisory: : : : Updated nfs-utils packages fix denial of service vulnerability

CVEs:CVE-2003-0252

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
Red Hat Linux 9 fixed Red Hat Red Hat Linux 9
CSAF Red Hat errata

RHSA-2003:207

PoC exploitCRITICAL2003-07-14

Red Hat Security Advisory: nfs-utils security update

CVEs:CVE-2003-0252

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:077

EPSS <= 49%CRITICAL2003-07-08

Red Hat Security Advisory: ethereal security update

CVEs:CVE-2003-0081CVE-2003-0159CVE-2003-0356CVE-2003-0357CVE-2003-0428CVE-2003-0429CVE-2003-0430CVE-2003-0431CVE-2003-0432

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:228

EPSS <= 49%HIGH2003-07-14

Red Hat Security Advisory: : : : Updated xinetd packages fix denial-of-service attacks and other bugs

CVEs:CVE-2002-0871CVE-2003-0211

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
CSAF Red Hat errata

RHSA-2003:162

EPSS <= 49%CRITICAL2003-07-15

Red Hat Security Advisory: : : : Updated Mozilla packages fix security vulnerability.

CVEs:CVE-2002-1308

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
CSAF Red Hat errata

RHSA-2003:027

EPSS <= 49%CRITICAL2003-07-09

Red Hat Security Advisory: netscape security update

CVEs:CVE-2002-0846CVE-2002-1467

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
CSAF Red Hat errata

RHSA-2003:236

EPSS <= 49%NONE2003-07-30

Red Hat Security Advisory: kdelibs security update

CVEs:CVE-2003-0459

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:238

EPSS <= 49%HIGH2003-07-21

Red Hat Security Advisory: : : : Updated 2.4 kernel fixes vulnerabilities

CVEs:CVE-2003-0461CVE-2003-0462CVE-2003-0464CVE-2003-0476CVE-2003-0501CVE-2003-0550CVE-2003-0551CVE-2003-0552CVE-2003-0699CVE-2003-0700

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
Red Hat Linux 9 fixed Red Hat Red Hat Linux 9
CSAF Red Hat errata

RHSA-2003:071

EPSS <= 49%CRITICAL2003-07-08

Red Hat Security Advisory: hanterm-xf security update

CVEs:CVE-2003-0077CVE-2003-0079

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:158

EPSS <= 49%2003-07-02

Red Hat Security Advisory: : : : Updated mm packages fix temporary file handling

CVEs:CVE-2002-0658

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
CSAF Red Hat errata

RHSA-2003:234

EPSS <= 49%MEDIUM2003-07-23

Red Hat Security Advisory: : Updated semi packages fix vulnerability

CVEs:CVE-2003-0440

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
Red Hat Linux 9 fixed Red Hat Red Hat Linux 9
CSAF Red Hat errata

RHSA-2003:223

EPSS <= 49%HIGH2003-07-25

Red Hat Security Advisory: stunnel security update

CVEs:CVE-2002-1563

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:221

EPSS <= 49%HIGH2003-07-25

Red Hat Security Advisory: : Updated stunnel packages fix signal vulnerability

CVEs:CVE-2002-1563

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
CSAF Red Hat errata

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.