Lucene search
MitreCVE-2001-0920HistoryJun 25, 2002 - 4:00 a.m.
CVE-2001-0920
2002-06-2504:00:00
mitre
web.nvd.nist.gov
27
cve-2001-0920
vulnerability
and 1.0.4
format string vulnerability
local user
execute arbitrary code
CVSS2
6.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
AI Score
7.6
Confidence
Low
EPSS
0.001
Percentile
20.3%
Format string vulnerability in auto nice daemon (AND) 1.0.4 and earlier allows a local user to possibly execute arbitrary code via a process name containing a format string.
Affected configurations
Node
patrick_schemitzautonice_daemonMatch1.0.0
ORpatrick_schemitzautonice_daemonMatch1.0.1
ORpatrick_schemitzautonice_daemonMatch1.0.2
ORpatrick_schemitzautonice_daemonMatch1.0.3
ORpatrick_schemitzautonice_daemonMatch1.0.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| patrick_schemitz | autonice_daemon | 1.0.0 | cpe:2.3:a:patrick_schemitz:autonice_daemon:1.0.0:*:*:*:*:*:*:* |
| patrick_schemitz | autonice_daemon | 1.0.1 | cpe:2.3:a:patrick_schemitz:autonice_daemon:1.0.1:*:*:*:*:*:*:* |
| patrick_schemitz | autonice_daemon | 1.0.2 | cpe:2.3:a:patrick_schemitz:autonice_daemon:1.0.2:*:*:*:*:*:*:* |
| patrick_schemitz | autonice_daemon | 1.0.3 | cpe:2.3:a:patrick_schemitz:autonice_daemon:1.0.3:*:*:*:*:*:*:* |
| patrick_schemitz | autonice_daemon | 1.0.4 | cpe:2.3:a:patrick_schemitz:autonice_daemon:1.0.4:*:*:*:*:*:*:* |
CVSS2
6.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
AI Score
7.6
Confidence
Low
EPSS
0.001
Percentile
20.3%
Related for CVE-2001-0920