Lucene search

K
cve[email protected]CVE-2003-1021
HistoryFeb 06, 2005 - 5:00 a.m.

CVE-2003-1021

2005-02-0605:00:00
web.nvd.nist.gov
23
scosession
openserver
privilege escalation
cve-2003-1021
nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.3%

The scosession program in OpenServer 5.0.6 and 5.0.7 allows local users to gain privileges via crafted strings on the commandline.

Affected configurations

NVD
Node
scoopenserverMatch5.0
OR
scoopenserverMatch5.0.1
OR
scoopenserverMatch5.0.2
OR
scoopenserverMatch5.0.3
OR
scoopenserverMatch5.0.4
OR
scoopenserverMatch5.0.5
OR
scoopenserverMatch5.0.6
OR
scoopenserverMatch5.0.6a
OR
scoopenserverMatch5.0.7

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.3%

Related for CVE-2003-1021