PT-2003-2326 · Amx · Amx

Greuff · Published 2003-12-31 · Updated 2017-07-29 · CVE-2003-1381

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AMX versions 0.9.2 and earlier

Description A format string issue allows remote attackers to execute arbitrary commands via format string specifiers in the amx say command.

Recommendations For AMX versions 0.9.2 and earlier, consider disabling the amx say command until a patch is available.

Exploit

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2003-1381

Affected Products

Amx

References · 6

• 🔥 https://exploit-db.com/exploits/22291 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1381 · Security Note
• http://securityfocus.com/bid/6968 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11427 · Note
• http://securityfocus.com/archive/1/313273 · Note
• http://securityreason.com/securityalert/3258 · Note