Lucene search

[email protected]CVE-2003-1452

HistoryOct 23, 2007 - 1:00 a.m.

CVE-2003-1452

2007-10-2301:00:00

CWE-16

[email protected]

web.nvd.nist.gov

cve-2003-1452

untrusted search path vulnerability

qualcomm qpopper

arbitrary code execution

nvd

smbpasswd program

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.6%

JSON

Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd program.

Affected configurations

NVD

Node

qualcommqpopperMatch4.0

qualcommqpopperMatch4.0.1

qualcommqpopperMatch4.0.2

qualcommqpopperMatch4.0.3

qualcommqpopperMatch4.0.4

qualcommqpopperMatch4.0.5

qualcommqpopperMatch4.0.5_fc2

qualcommqpopperMatch4.0_b14

CPENameOperatorVersion
qualcomm:qpopperqualcomm qpoppereq4.0
qualcomm:qpopperqualcomm qpoppereq4.0.1
qualcomm:qpopperqualcomm qpoppereq4.0.2
qualcomm:qpopperqualcomm qpoppereq4.0.3
qualcomm:qpopperqualcomm qpoppereq4.0.4
qualcomm:qpopperqualcomm qpoppereq4.0.5
qualcomm:qpopperqualcomm qpoppereq4.0.5_fc2
qualcomm:qpopperqualcomm qpoppereq4.0_b14

CPE	Name	Operator	Version
qualcomm:qpopper	qualcomm qpopper	eq	4.0
qualcomm:qpopper	qualcomm qpopper	eq	4.0.1
qualcomm:qpopper	qualcomm qpopper	eq	4.0.2
qualcomm:qpopper	qualcomm qpopper	eq	4.0.3
qualcomm:qpopper	qualcomm qpopper	eq	4.0.4
qualcomm:qpopper	qualcomm qpopper	eq	4.0.5
qualcomm:qpopper	qualcomm qpopper	eq	4.0.5_fc2
qualcomm:qpopper	qualcomm qpopper	eq	4.0_b14

References

archives.neohapsis.com/archives/vulnwatch/2003-q2/0047.html

securityreason.com/securityalert/3268

www.securityfocus.com/archive/1/319811

www.securityfocus.com/bid/7447

exchange.xforce.ibmcloud.com/vulnerabilities/11877

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.6%

JSON

Related for CVE-2003-1452

cvelist1 nvd1