Lucene search

[email protected]CVE-2003-0015

HistorySep 01, 2004 - 4:00 a.m.

CVE-2003-0015

2004-09-0104:00:00

CWE-415

[email protected]

web.nvd.nist.gov

cve

2003

0015

double-free

vulnerability

cvs

denial of service

execute

arbitrary code

remote attackers

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.296 Low

EPSS

Percentile

96.9%

JSON

Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.

Affected configurations

NVD

Node

freebsdfreebsdMatch4.4

freebsdfreebsdMatch4.5

freebsdfreebsdMatch4.6

freebsdfreebsdMatch4.7

freebsdfreebsdMatch5.0

Node

cvscvsMatch1.10.7

cvscvsMatch1.10.8

cvscvsMatch1.11

cvscvsMatch1.11.1

cvscvsMatch1.11.1p1

cvscvsMatch1.11.2

cvscvsMatch1.11.3

cvscvsMatch1.11.4

CPENameOperatorVersion
freebsd:freebsdfreebsdeq4.4
freebsd:freebsdfreebsdeq4.5
freebsd:freebsdfreebsdeq4.6
freebsd:freebsdfreebsdeq4.7
freebsd:freebsdfreebsdeq5.0