Lucene search

[email protected]CVE-2003-1155

HistoryMay 10, 2005 - 4:00 a.m.

CVE-2003-1155

2005-05-1004:00:00

[email protected]

web.nvd.nist.gov

x-cd-roast

symlink attack

file overwrite

vulnerability

cve-2003-1155

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.6%

JSON

X-CD-Roast 0.98 alpha10 through alpha14 allows local users to overwrite arbitrary files via a symlink attack on an unknown file.

Affected configurations

NVD

Node

x-cd-roastx-cd-roastMatch0.98_alpha10

x-cd-roastx-cd-roastMatch0.98_alpha11

x-cd-roastx-cd-roastMatch0.98_alpha12

x-cd-roastx-cd-roastMatch0.98_alpha13

x-cd-roastx-cd-roastMatch0.98_alpha14

CPENameOperatorVersion
x-cd-roast:x-cd-roastx-cd-roasteq0.98_alpha10
x-cd-roast:x-cd-roastx-cd-roasteq0.98_alpha11
x-cd-roast:x-cd-roastx-cd-roasteq0.98_alpha12
x-cd-roast:x-cd-roastx-cd-roasteq0.98_alpha13
x-cd-roast:x-cd-roastx-cd-roasteq0.98_alpha14

CPE	Name	Operator	Version
x-cd-roast:x-cd-roast	x-cd-roast	eq	0.98_alpha10
x-cd-roast:x-cd-roast	x-cd-roast	eq	0.98_alpha11
x-cd-roast:x-cd-roast	x-cd-roast	eq	0.98_alpha12
x-cd-roast:x-cd-roast	x-cd-roast	eq	0.98_alpha13
x-cd-roast:x-cd-roast	x-cd-roast	eq	0.98_alpha14

References

secunia.com/advisories/10162

securitytracker.com/id?1008094

www.osvdb.org/2786

www.securityfocus.com/bid/8983

www.xcdroast.org/xcdr098/changelog-a15.html

exchange.xforce.ibmcloud.com/vulnerabilities/13612

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.6%

JSON

Related for CVE-2003-1155

cvelist1 nvd1