CVE-2003-0188

lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.debian.org/security/2003/dsa-304	Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2003-167.html
http://www.redhat.com/support/errata/RHSA-2003-169.html	Patch Vendor Advisory
http://www.turbolinux.com/security/TLSA-2003-35.txt
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A430

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:lv:lv:4.49.1:::::::*
	cpe:2.3:a:lv:lv:4.49.2:::::::*
	cpe:2.3:a:lv:lv:4.49.3:::::::*
	cpe:2.3:a:lv:lv:4.49.4:::::::*
	cpe:2.3:a:redhat:lv:4.49.4-1::i386:::::
	cpe:2.3:a:redhat:lv:4.49.4-3::i386:::::
	cpe:2.3:a:redhat:lv:4.49.4-7::i386:::::
	cpe:2.3:a:redhat:lv:4.49.4-9::i386:::::

Configuration 2 (hide)

OR	cpe:2.3:o:redhat:linux:7.1:::::::*
	cpe:2.3:o:redhat:linux:7.2:::::::*
	cpe:2.3:o:redhat:linux:7.3:::::::*
	cpe:2.3:o:redhat:linux:8.0:::::::*
	cpe:2.3:o:redhat:linux:9.0::i386:::::

History

No history.

Information

Published : 2003-06-09 04:00

Updated : 2017-10-11 01:29

NVD link : CVE-2003-0188

Mitre link : CVE-2003-0188

CVE.ORG link : CVE-2003-0188

JSON object : View

Products Affected

lv

lv

redhat

lv
linux

CWE

NVD-CWE-Other

{"id": "CVE-2003-0188", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2003-06-09T04:00:00.000", "references": [{"url": "http://www.debian.org/security/2003/dsa-304", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2003-167.html", "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2003-169.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.turbolinux.com/security/TLSA-2003-35.txt", "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A430", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories."}, {"lang": "es", "value": "lv lee un fichero .lv desde el directorio de trabajo actual, lo que permitir\u00eda que usuarios locales ejecuten comandos arbitrarios como otros usuarios lv (colocando ficheros .lv dentro de otros directorios)."}], "lastModified": "2017-10-11T01:29:06.637", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:lv:lv:4.49.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA6A63E3-13BB-4FD7-B6FF-8494A694A637"}, {"criteria": "cpe:2.3:a:lv:lv:4.49.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFE97CE9-247C-4B85-A2F1-32F14D59190A"}, {"criteria": "cpe:2.3:a:lv:lv:4.49.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1126844F-3B9D-46E7-9712-7A0D6A67773C"}, {"criteria": "cpe:2.3:a:lv:lv:4.49.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07A2DB45-1AA8-42AC-A082-00BD345EE757"}, {"criteria": "cpe:2.3:a:redhat:lv:4.49.4-1:*:i386:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFB601B0-3BDB-48E2-BAD1-DC139EF0BDB9"}, {"criteria": "cpe:2.3:a:redhat:lv:4.49.4-3:*:i386:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DEAC3323-384B-4733-886D-56CBE396F72A"}, {"criteria": "cpe:2.3:a:redhat:lv:4.49.4-7:*:i386:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E33DD9C-62C8-4616-B627-4903FE90F2FA"}, {"criteria": "cpe:2.3:a:redhat:lv:4.49.4-9:*:i386:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E67C635-26FF-4147-A5C5-E40C6166C9CF"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D46E093-1C68-43BB-B281-12117EC8DE0F"}, {"criteria": "cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E562907F-D915-4030-847A-3C6834A80D4E"}, {"criteria": "cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "138985E6-5107-4E8B-A801-C3D5FE075227"}, {"criteria": "cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "038FEDE7-986F-4CA5-9003-BA68352B87D4"}, {"criteria": "cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F3FDE8C4-5FFD-4CC2-9F35-7C32043966D1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}