CVE-2003-0709
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI...
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option.
- Record
CVE-2003-0709- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option.
- Record
CVE-2003-0709- Updated
- 2026-11-02
EUVDEUVD-2003-0700 No score
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option.
- Record
EUVD-2003-0700- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hjjv-mh56-25f6 No score
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI...
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option.
- Record
GHSA-hjjv-mh56-25f6- Updated
- 2026-11-02
OSV No score
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option.
- Record
CVE-2003-0709- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0709 No score
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option.
- Record
DEBIAN-CVE-2003-0709- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0709 is a high vulnerability (CVSS 7.5) in Whois, published September 3, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.80%, the 86th percentile. Fixed in whois 4.6.7.