PT-2003-1581 · Opt · Options Parsing Tool

Kf · Published 2003-06-10 · Updated 2016-10-18 · CVE-2003-0390

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Options Parsing Tool (OPT) shared library versions 3.18 and earlier

Description: The issue is related to multiple buffer overflows in the OPT shared library. When used in setuid programs, local users may be able to execute arbitrary code via long command line options that are fed into macros such as opt warn 2, as used in functions such as opt atoi().

Recommendations: For Options Parsing Tool (OPT) shared library versions 3.18 and earlier, consider updating to a version later than 3.18 to resolve the issue. As a temporary workaround, consider restricting the use of the OPT shared library in setuid programs to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2003-0390

Affected Products

Options Parsing Tool

References · 9

• 🔥 https://exploit-db.com/exploits/22537 · Exploit
• 🔥 https://exploit-db.com/exploits/22538 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0390 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0390 · Vendor Advisory
• http://nis-www.lanl.gov/~jt/Software/opt/opt-3.19.tar.gz · Patch
• https://osv.dev/vulnerability/CVE-2003-0390 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2003-0390 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=105121918523320&w=2 · Note
• http://marc.info/?l=bugtraq&m=105371246204866&w=2 · Note