CVE-2003-1287
Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code...
Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name such as com1.pl, con.pl, or aux.pl, which causes Perl to read the code from the associated device.
Exploit likelihood
What each source reports
NVD Score used
Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name such as com1.pl, con.pl, or aux.pl, which causes Perl to read the code from the associated device.
- Record
CVE-2003-1287- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name such as com1.pl, con.pl, or aux.pl, which causes Perl to read the code from the associated device.
- Record
CVE-2003-1287- Updated
- 2026-11-02
EUVDEUVD-2003-1277 No score
Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name such as com1.pl, con.pl, or aux.pl, which causes Perl to read the code from the associated device.
- Record
EUVD-2003-1277- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p887-wgc2-jm3q No score
Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code...
Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name such as com1.pl, con.pl, or aux.pl, which causes Perl to read the code from the associated device.
- Record
GHSA-p887-wgc2-jm3q- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-1287 is a medium vulnerability (CVSS 4.6) in Sambar Server, published December 31, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. No source names a fixed version.
References
sambar.com/security.htm
secunia.com/advisories/9578
osvdb.org/5781
securitytracker.com/id?1007819
idefense.com/application/poi/display?id=103&type=vulnerabilities&flashstatus=true
archives.neohapsis.com/archives/bugtraq/2004-04/0353.html
exchange.xforce.ibmcloud.com/vulnerabilities/16059
nvd.nist.gov/vuln/detail/CVE-2003-1287
github.com/advisories/GHSA-p887-wgc2-jm3q