CVE-2003-0671 in tcpflowinfo

Zusammenfassung

von MITRE

Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via the device name argument, as demonstrated in Sustworks IPNetSentryX and IPNetMonitorX the setuid program RunTCPFlow.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservieren

07.08.2003

Veröffentlichung

27.08.2003

Moderieren

akzeptiert

Eintrag

VDB-237

CPE

bereit

Exploit

Download

EPSS

0.00536

KEV

nein

Aktivitäten

very low

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2003-0671
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2003-0671
CVE Detailshttps://www.cvedetails.com/cve/CVE-2003-0671/

◂ ZurückÜbersichtWeiter ▸

Interested in the pricing of exploits?

See the underground prices here!