Lucene search

K
cveMitreCVE-2003-0955
HistoryDec 15, 2003 - 5:00 a.m.

CVE-2003-0955

2003-12-1505:00:00
mitre
web.nvd.nist.gov
26
cve-2003-0955
openbsd kernel
local users
denial of service
execute arbitrary code
buffer overflow

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0

Percentile

0.4%

OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code in 3.4 via a program with an invalid header that is not properly handled by (1) ibcs2_exec.c in the iBCS2 emulation (compat_ibcs2) or (2) exec_elf.c, which leads to a stack-based buffer overflow.

Affected configurations

Nvd
Node
openbsdopenbsdMatch3.3
OR
openbsdopenbsdMatch3.4
VendorProductVersionCPE
openbsdopenbsd3.3cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*
openbsdopenbsd3.4cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0

Percentile

0.4%

Related for CVE-2003-0955