CVE-2003-0670 in IPNetSentryX

Summary

Sustworks IPNetSentryX and IPNetMonitorX allow local users to sniff network packets via the setuid helper applications (1) RunTCPDump, which calls tcpdump, and (2) RunTCPFlow, which calls tcpflow.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 08/07/2003
• Disclosure: 08/27/2003
• Moderation: VulDB entry created
• Entries: 1: VDB-20803
• CPE: ready
• CWE: CWE-269 (Confirmed)
• CVSS: 4.0
• EPSS: 0.00092
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0670
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0670
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0670/