CVE-2003-0773 in SANE

Resumen (Inglés)

saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2003-09-10

Divulgación

2003-09-22

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
20836	SANE saned saned.conf SANE_NET_INIT escalada de privilegios	269	No está definido	Arreglo oficial	CVE-2003-0773

Fuentes

• MITRE
• NVD
• CVE Details