PT-2003-1869 · Sane Backends · Sane-Backends

Published 2003-09-12 · Updated 2008-09-10 · CVE-2003-0776

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: sane-backends versions 1.0.7 and earlier

Description: The issue in sane-backends is related to the saned component, which does not properly check the validity of the RPC numbers it receives before retrieving parameters. The consequences of this issue are unknown.

Recommendations: For versions 1.0.7 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2003-0776

DSA-379

Affected Products

Sane-Backends

References · 11

• 🔥 http://debian.org/security/2003/dsa-379 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0776 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0776 · Vendor Advisory
• http://novell.com/linux/security/advisories/2003_046_sane.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2003-0776 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2003:099 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-278.html · Vendor Advisory
• ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-285.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2003-0776 · Vendor Advisory
• http://securityfocus.com/bid/8593 · Note