Lucene search

MitreCVE-2003-0333

HistoryMay 23, 2003 - 4:00 a.m.

CVE-2003-0333

2003-05-2304:00:00

mitre

web.nvd.nist.gov

cve-2003-0333

buffer overflow

kermit

hp-ux

privilege escalation

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

40.4%

JSON

Multiple buffer overflows in kermit in HP-UX 10.20 and 11.00 (C-Kermit 6.0.192 and possibly other versions before 8.0) allow local users to gain privileges via long arguments to (1) ask, (2) askq, (3) define, (4) assign, and (5) getc, some of which may share the same underlying function “doask,” a different vulnerability than CVE-2001-0085.

Affected configurations

Nvd

Node

hphp-uxMatch10.20

hphp-uxMatch11.00

VendorProductVersionCPE
hphp-ux10.20cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*
hphp-ux11.00cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	hp-ux	10.20	cpe:2.3:o:hp:hp-ux:10.20:::::::*
hp	hp-ux	11.00	cpe:2.3:o:hp:hp-ux:11.00:::::::*

References

archives.neohapsis.com/archives/hp/current/0044.html

marc.info/?l=bugtraq&m=105189670912220&w=2

marc.info/?l=bugtraq&m=105190667523456&w=2

www.kb.cert.org/vuls/id/971364

www.securityfocus.com/bid/7627

exchange.xforce.ibmcloud.com/vulnerabilities/11929

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

40.4%

JSON

Related for CVE-2003-0333