CVE-2003-1308 in fvwm

Summary

CRLF injection vulnerability in fvwm-menu-directory for fvwm 2.5.x before 2.5.10 and 2.4.x before 2.4.18 allows local users to execute arbitrary commands via carriage returns in a filename.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

11/17/2006

Disclosure

12/31/2003

Moderation

VulDB entry created

Entries

1

CPE

ready

CWE

CWE-269

Exploit

Download

CVSS

5.9

EPSS

0.00587

CTI

0.00

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-1308
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-1308
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-1308/