CVE-2003-1379 in Clarkconnect Linux

Riassunto

di MITRE

clarkconnectd in ClarkConnect Linux 1.2 allows remote attackers to obtain sensitive information about the server via the characters (1) A, which reveals the date and time, (2) F, (3) M, which reveals ifconfig information, (4) P, which lists the processes, (5) Y, which reveals the snort log files, or (6) b, which reveals /var/log/messages.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 18/10/2007
• Divulgazione: 31/12/2003
• Moderazione: accettato
• Voce: VDB-21300
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 5.0 (NVD)
• EPSS: 0.01894
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-1379
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-1379
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-1379/