Lucene search

K
cve[email protected]CVE-2003-0683
HistoryNov 03, 2003 - 5:00 a.m.

CVE-2003-0683

2003-11-0305:00:00
web.nvd.nist.gov
23
nfs
sgi
bypass
access checks
/etc/exports
wildcard

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.8%

NFS in SGI 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an /etc/exports entry uses wildcards without any hostnames or groups, which could allow attackers to bypass intended restrictions.

Affected configurations

NVD
Node
sgiirixMatch6.5.21f
OR
sgiirixMatch6.5.21m

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.8%

Related for CVE-2003-0683