Lucene search

K
cve[email protected]CVE-2003-0630
HistoryOct 20, 2003 - 4:00 a.m.

CVE-2003-0630

2003-10-2004:00:00
web.nvd.nist.gov
37
cve
2003
0630
buffer overflow
atari800
svgalib
setuid
privileges
command line arguments
nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%

Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator (atari800) before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrated with the -osa_rom argument.

Affected configurations

NVD
Node
atari800atari800Match1.0.1
OR
atari800atari800Match1.0.2
OR
atari800atari800Match1.0.3
OR
atari800atari800Match1.0.4
OR
atari800atari800Match1.0.5
OR
atari800atari800Match1.0.6
OR
atari800atari800Match1.0.7
OR
atari800atari800Match1.2
OR
atari800atari800Match1.2.1
OR
atari800atari800Match1.2.1_pre0
OR
atari800atari800Match1.2.2

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%