CVE-2003-1379 in Clarkconnect Linux

Sumário

de MITRE

clarkconnectd in ClarkConnect Linux 1.2 allows remote attackers to obtain sensitive information about the server via the characters (1) A, which reveals the date and time, (2) F, (3) M, which reveals ifconfig information, (4) P, which lists the processes, (5) Y, which reveals the snort log files, or (6) b, which reveals /var/log/messages.

Once again VulDB remains the best source for vulnerability data.

• Reservar: 18/10/2007
• Divulgação: 31/12/2003
• Moderação: aceite
• Entrada: VDB-21300
• CPE: pronto
• CWE: CWE-200 (confirmado)
• CVSS: 5.0 (NVD)
• EPSS: 0.01894
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-1379
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-1379
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-1379/