Red Hat Security Advisories · September 2003 — Red Hat Security Advisories
14 RHSAs 17 CVEs 2 EXPLOITED

Red Hat Security Response Team errata for 2003-09. Mirrored into Vulnetix VDB with downloadable CSAF.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). Each row also links to the raw CSAF document stored on the Vulnetix artefact mirror. 2 are already weaponised in the wild: see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

RHSA-2003:283

ExploitedVulnCheck KEV listedCRITICAL2003-09-17

Red Hat Security Advisory: : Updated Sendmail packages fix vulnerability.

CVEs:CVE-2003-0681CVE-2003-0694

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
Red Hat Linux 9 fixed Red Hat Red Hat Linux 9
CSAF Red Hat errata

RHSA-2003:284

ExploitedVulnCheck KEV listedCRITICAL2003-09-17

Red Hat Security Advisory: sendmail security update

CVEs:CVE-2003-0694

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:244

Weaponized exploit2003-09-22

Red Hat Security Advisory: apache security update

CVEs:CVE-2003-0020CVE-2003-0192

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:243

Weaponized exploit2003-09-22

Red Hat Security Advisory: : Updated Apache and mod_ssl packages fix security vulnerabilities

CVEs:CVE-2003-0020CVE-2003-0192

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
CSAF Red Hat errata

RHSA-2003:279

Weaponized exploitCRITICAL2003-09-16

Red Hat Security Advisory: : Updated OpenSSH packages fix potential vulnerabilities

CVEs:CVE-2003-0682CVE-2003-0693CVE-2003-0695

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
Red Hat Linux 9 fixed Red Hat Red Hat Linux 9
CSAF Red Hat errata

RHSA-2003:280

Weaponized exploitCRITICAL2003-09-16

Red Hat Security Advisory: openssh security update

CVEs:CVE-2003-0682CVE-2003-0693CVE-2003-0695

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:273

EPSS <= 49%CRITICAL2003-09-11

Red Hat Security Advisory: : Updated pine packages fix vulnerabilities

CVEs:CVE-2003-0720CVE-2003-0721

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
Red Hat Linux 9 fixed Red Hat Red Hat Linux 9
CSAF Red Hat errata

RHSA-2003:274

EPSS <= 49%CRITICAL2003-09-11

Red Hat Security Advisory: pine security update

CVEs:CVE-2003-0720CVE-2003-0721

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:256

EPSS <= 49%CRITICAL2003-09-22

Red Hat Security Advisory: : : : Updated Perl packages fix security issues.

CVEs:CVE-2002-1323CVE-2003-0615

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
Red Hat Linux 9 fixed Red Hat Red Hat Linux 9
CSAF Red Hat errata

RHSA-2003:257

EPSS <= 49%CRITICAL2003-09-22

Red Hat Security Advisory: perl security update

CVEs:CVE-2002-1323CVE-2003-0615

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:270

EPSS <= 49%CRITICAL2003-09-16

Red Hat Security Advisory: kdebase security update

CVEs:CVE-2003-0690CVE-2003-0692

Affected products

ProductStatusVendorPackage
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 fixed Red Hat Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Enterprise Linux ES version 2.1 fixed Red Hat Red Hat Enterprise Linux ES version 2.1
Red Hat Enterprise Linux WS version 2.1 fixed Red Hat Red Hat Enterprise Linux WS version 2.1
Red Hat Linux Advanced Workstation 2.1 fixed Red Hat Red Hat Linux Advanced Workstation 2.1
CSAF Red Hat errata

RHSA-2003:269

EPSS <= 49%CRITICAL2003-09-16

Red Hat Security Advisory: : Updated KDE packages fix security issues

CVEs:CVE-2003-0690CVE-2003-0692

Affected products

ProductStatusVendorPackage
Red Hat Linux 7.1 fixed Red Hat Red Hat Linux 7.1
Red Hat Linux 7.2 fixed Red Hat Red Hat Linux 7.2
Red Hat Linux 7.3 fixed Red Hat Red Hat Linux 7.3
Red Hat Linux 8.0 fixed Red Hat Red Hat Linux 8.0
Red Hat Linux 9 fixed Red Hat Red Hat Linux 9
CSAF Red Hat errata

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.