Lucene search

[email protected]CVE-2001-1553

HistoryOct 03, 2022 - 4:22 p.m.

CVE-2001-1553

2022-10-0316:22:34

[email protected]

web.nvd.nist.gov

seti@home

buffer overflow

cve-2001-1553

arbitrary code execution

setuid

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Buffer overflow in setiathome for SETI@home 3.03, if installed setuid, could allow local users to execute arbitrary code via long command line options (1) socks_server, (2) socks_user, and (3) socks_passwd. NOTE: since the default configuration of setiathome is not setuid, perhaps this issue should not be included in CVE.

Affected configurations

NVD

Node

university_of_californiaseti_at_homeMatch3.03

CPENameOperatorVersion
university_of_california:seti_at_homeuniversity of california seti at homeeq3.03

CPE	Name	Operator	Version
university_of_california:seti_at_home	university of california seti at home	eq	3.03

References

archives.neohapsis.com/archives/vuln-dev/2001-q4/0662.html

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2001-1553

nvd1 cvelist1