CVE-2003-1589
CVE-2003-1589 is a medium-severity vulnerability in Sun One Web Server with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 1% (65th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Sun One Web Server
- Published:
- Last modified:
Description
Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 4.1 before SP13 and 6.0 before SP6 on Windows allows attackers to cause a denial of service (daemon crash) via unknown vectors.
Frequently asked questions
- What is CVE-2003-1589?
- Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 4.1 before SP13 and 6.0 before SP6 on Windows allows attackers to cause a denial of service (daemon crash) via unknown vectors.
- How severe is CVE-2003-1589?
- CVE-2003-1589 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2003-1589 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (65th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2003-1589?
- CVE-2003-1589 primarily affects Sun One Web Server. In total, 19 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2003-1589?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2003-1589 published?
- CVE-2003-1589 was published on 2010-02-25 and last updated on 2026-06-16.
References
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201454-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56616
Affected products (19)
- cpe:2.3:a:sun:one_web_server:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:4.1:sp1:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:4.1:sp10:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:4.1:sp11:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:4.1:sp12:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:4.1:sp2:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:4.1:sp3:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:4.1:sp4:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:4.1:sp5:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:4.1:sp6:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:4.1:sp7:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:4.1:sp8:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:4.1:sp9:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:6.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:6.0:sp2:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:6.0:sp3:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:6.0:sp4:*:*:*:*:*:*
- cpe:2.3:a:sun:one_web_server:6.0:sp5:*:*:*:*:*:*
More vulnerabilities in Sun One Web Server
- CVE-2004-0826 — High (CVSS 7.5): Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute…
- CVE-2006-2501 — Medium (CVSS 6.8): Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and…
- CVE-2004-2763 — Medium (CVSS 5.8): The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the…
- CVE-2003-1590 — Medium (CVSS 5.0): Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 6.0 SP3 through SP5 on Windows allows remote attackers to…
- CVE-2003-1126 — Medium (CVSS 5.0): Unknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows remote attackers to…
- CVE-2002-1042 — Medium (CVSS 5.0): Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise…