Lucene search

K
cve[email protected]CVE-2003-0933
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2003-0933

2022-10-0316:15:45
web.nvd.nist.gov
25
buffer overflow
conquest 7.2
local user
arbitrary code
environment variable

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Buffer overflow in conquest 7.2 and earlier may allow a local user to execute arbitrary code via a long environment variable.

Affected configurations

NVD
Node
conquestconquestMatch7.1.1_-6
CPENameOperatorVersion
conquest:conquestconquesteq7.1.1_-6

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%