Vulnerability record · CVE-2003-1126 · published 31 December 2003

CVE-2003-1126: Sun one web server vulnerability

Sun · One Web Server

Unknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows remote attackers to cause a denial of service.

5.0 CVSS 2.0 Medium EPSS 2.0% · top 20.2%

5.0CVSS 2.0 base score

2.0%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

6References

16 Jun 2026Last modified by NVD

Description

Unknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows remote attackers to cause a denial of service.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

One Web Server Sun

References

Link	Tags
http://secunia.com/advisories/9541	Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-56180-1	Vendor Advisory
http://www.kb.cert.org/vuls/id/636964	Third Party AdvisoryUS Government Resource
http://secunia.com/advisories/9541	Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-56180-1	Vendor Advisory
http://www.kb.cert.org/vuls/id/636964	Third Party AdvisoryUS Government Resource

Track CVE-2003-1126 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2004-0826Mozilla network security services vulnerabilityHeap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified recor…EPSS 23%31 Dec 2004 6.8CVE-2006-2501Sun java system application server vulnerabilityCross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application S…EPSS 3.4%20 May 2006 5.8CVE-2004-2763Sun iplanet web server vulnerabilityThe default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can al…EPSS 2.2%1 Jun 2009 5.0CVE-2003-1589Sun one web server vulnerabilityUnspecified vulnerability in Sun ONE (aka iPlanet) Web Server 4.1 before SP13 and 6.0 before SP6 on Windows allows attackers to cause a denial of ser…EPSS 1.2%25 Feb 2010 5.0CVE-2003-1590Sun one web server vulnerabilityUnspecified vulnerability in Sun ONE (aka iPlanet) Web Server 6.0 SP3 through SP5 on Windows allows remote attackers to cause a denial of service (da…EPSS 1.6%25 Feb 2010 5.0CVE-2002-1042Netscape enterprise server vulnerabilityDirectory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Wi…EPSS 3.9%4 Oct 2002 4.3CVE-2003-1579Sun one web server vulnerabilitySun ONE (aka iPlanet) Web Server 6 on Windows, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify w…EPSS 0.89%5 Feb 2010 4.3CVE-2003-1578Sun one web server vulnerabilitySun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attacker…EPSS 1.1%5 Feb 2010

Source: NIST National Vulnerability Database (record CVE-2003-1126), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.