Lucene search

[email protected]CVE-2001-0927

HistoryNov 27, 2001 - 5:00 a.m.

CVE-2001-0927

2001-11-2705:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-0927

gnome libgtop_daemon

vulnerability

remote attackers

arbitrary code execution

7.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.027 Low

EPSS

Percentile

90.3%

JSON

Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execute arbitrary code via an argument that contains format specifiers that are passed into the (1) syslog_message and (2) syslog_io_message functions.

CPENameOperatorVersion
gnome:libgtop_daemongnome libgtop daemoneq1.0.6
gnome:libgtop_daemongnome libgtop daemoneq1.0.7
gnome:libgtop_daemongnome libgtop daemoneq1.0.12
gnome:libgtop_daemongnome libgtop daemoneq1.0.9

CPE	Name	Operator	Version
gnome:libgtop_daemon	gnome libgtop daemon	eq	1.0.6
gnome:libgtop_daemon	gnome libgtop daemon	eq	1.0.7
gnome:libgtop_daemon	gnome libgtop daemon	eq	1.0.12
gnome:libgtop_daemon	gnome libgtop daemon	eq	1.0.9

References

ftp://ftp.gnome.org/pub/GNOME/stable/sources/libgtop/libgtop-1.0.13.tar.gz

marc.info/?l=bugtraq&m=100689302316077&w=2

www.debian.org/security/2002/dsa-098

7.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.027 Low

EPSS

Percentile

90.3%

JSON

Related for CVE-2001-0927

nessus2 openvas2