CVE-2003-0393
Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet...
Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Internet Traffic" modes, which allows remote attackers to identify running services via FIN scans or Xmas scans.
Exploit likelihood
What each source reports
NVD Score used
Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Internet Traffic" modes, which allows remote attackers to identify running services via FIN scans or Xmas scans.
- Record
CVE-2003-0393- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Internet Traffic" modes, which allows remote attackers to identify running services via FIN scans or Xmas scans.
- Record
CVE-2003-0393- Updated
- 2026-11-02
EUVDEUVD-2003-0387 No score
Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Internet Traffic" modes, which allows remote attackers to identify running services via FIN scans or Xmas scans.
- Record
EUVD-2003-0387- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g4pg-gr8x-mfcf No score
Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet...
Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Internet Traffic" modes, which allows remote attackers to identify running services via FIN scans or Xmas scans.
- Record
GHSA-g4pg-gr8x-mfcf- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0393 is a medium vulnerability (CVSS 5.0) in Privacyware Privatefirewall, published June 10, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.31%, the 70th percentile. No source names a fixed version.