CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2003-0671

Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via the device name argument, as demonstrated in Sustworks IPNetSentryX and IPNetMonitorX the setuid program RunTCPFlow.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 19.2%

CVSS Severity

CVSS v2 Score 7.2

References

http://www.atstake.com/research/advisories/2003/a080703-1.txt
http://www.atstake.com/research/advisories/2003/a080703-2.txt
http://www.atstake.com/research/advisories/2003/a080703-1.txt
http://www.atstake.com/research/advisories/2003/a080703-2.txt

Products affected by CVE-2003-0671

Jeremy Elson » Tcpflow » Version: 0.10

cpe:2.3:a:jeremy_elson:tcpflow:0.10
Jeremy Elson » Tcpflow » Version: 0.11

cpe:2.3:a:jeremy_elson:tcpflow:0.11
Jeremy Elson » Tcpflow » Version: 0.12

cpe:2.3:a:jeremy_elson:tcpflow:0.12
Jeremy Elson » Tcpflow » Version: 0.20

cpe:2.3:a:jeremy_elson:tcpflow:0.20

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2003-0671

Products

Pricing

Contact Us