Lucene search

K
cve[email protected]CVE-2001-1272
HistoryMay 03, 2002 - 4:00 a.m.

CVE-2001-1272

2002-05-0304:00:00
web.nvd.nist.gov
16
cve-2001-1272
wmtv 0.6.5
privilege flaw
local user attack
command execution

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the -e (external command) option.

Affected configurations

NVD
Node
wliangwmtvRange0.6.5
CPENameOperatorVersion
wliang:wmtvwliang wmtvle0.6.5

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2001-1272