Lucene search

K
cve[email protected]CVE-2003-0834
HistoryDec 01, 2003 - 5:00 a.m.

CVE-2003-0834

2003-12-0105:00:00
web.nvd.nist.gov
22
cde
libdthelp
buffer overflow
local users
arbitrary code
environment variables

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.3%

Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.

Affected configurations

NVD
Node
scoopen_unixMatch8.0
OR
scounixwareMatch7.1.1
OR
scounixwareMatch7.1.3

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.3%