PT-2003-1021 · Xbl · Xbl

Published 2003-06-24 · Updated 2008-09-05 · CVE-2003-0451

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions xbl version 1.0k and earlier

Description The issue concerns multiple buffer overflows that can be exploited by local users to gain privileges through certain long command line arguments. Additionally, there are multiple vulnerabilities in the xbl package that can lead to breaches of confidentiality, integrity, and availability of protected information, which can be exploited by a local attacker.

Recommendations For xbl version 1.0k and earlier, update to a version later than 1.0k to resolve the issue. As a temporary workaround, consider restricting the use of long command line arguments to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-03023

CVE-2003-0451

DSA-327

Affected Products

Xbl

References · 5

• https://bdu.fstec.ru/vul/2015-03023 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2003-0451 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0451 · Security Note
• http://debian.org/security/2003/dsa-327 · Vendor Advisory
• http://debian.org/security/dsa-327 · Note