CVE-2003-0773 in SANE

Sumário (Inglês)

saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

10/09/2003

Divulgação

22/09/2003

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
20836	SANE saned saned.conf SANE_NET_INIT Elevação de Privilégios	269	Não definido	Correção oficial	CVE-2003-0773

Fontes

• MITRE
• NVD
• CVE Details