PT-2003-1901 · Cde · Cde Libdthelp Library

Kevin Kotas · Publicado 2003-11-06 · Atualizado 2018-05-03 · CVE-2003-0834

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CDE libDtHelp library (affected versions not specified)

Description A buffer overflow issue exists in the CDE libDtHelp library, allowing local users to execute arbitrary code. This can be achieved through various means, including modifying the DTHELPUSERSEARCHPATH environment variable and utilizing the Help feature, altering the DTSEARCHPATH, or modifying the LOGNAME.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2003-0834

Produtos afetados

Cde Libdthelp Library

Referências · 10

• 🔥 https://exploit-db.com/exploits/713 · Exploit
• 🔥 https://exploit-db.com/exploits/714 · Exploit
• http://securityfocus.com/bid/8973 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-0834 · Nota de Segurança
• http://idefense.com/application/poi/display?id=134&type=vulnerabilities&flashstatus=false · Nota
• ftp://patches.sgi.com/support/free/security/advisories/20040801-01-P · Aviso do Fabricante
• http://kb.cert.org/vuls/id/575804 · Correção
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5141 · Nota
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57414 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/hp/2003-q4/0047.html · Aviso do Fabricante