Lucene search

K
nvd[email protected]NVD:CVE-2003-0834
HistoryDec 01, 2003 - 5:00 a.m.

CVE-2003-0834

2003-12-0105:00:00
web.nvd.nist.gov
5

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

High

EPSS

0

Percentile

5.3%

Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.

Affected configurations

Nvd
Node
scoopen_unixMatch8.0
OR
scounixwareMatch7.1.1
OR
scounixwareMatch7.1.3
VendorProductVersionCPE
scoopen_unix8.0cpe:2.3:o:sco:open_unix:8.0:*:*:*:*:*:*:*
scounixware7.1.1cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*
scounixware7.1.3cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

High

EPSS

0

Percentile

5.3%