Lucene search

[email protected]CVE-2003-1287

HistoryNov 22, 2005 - 2:00 a.m.

CVE-2003-1287

2005-11-2202:00:00

[email protected]

web.nvd.nist.gov

cve-2003-1287

sambar server

physical access

arbitrary code execution

security vulnerability

7.5 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

75.5%

JSON

Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name such as com1.pl, con.pl, or aux.pl, which causes Perl to read the code from the associated device.

Affected configurations

NVD

Node

sambarsambar_serverMatch5.0

sambarsambar_serverMatch5.0beta1

sambarsambar_serverMatch5.0beta2

sambarsambar_serverMatch5.0beta3

sambarsambar_serverMatch5.0beta4

sambarsambar_serverMatch5.0beta5

sambarsambar_serverMatch5.0beta6

sambarsambar_serverMatch5.1

sambarsambar_serverMatch5.1beta1

sambarsambar_serverMatch5.1beta2

sambarsambar_serverMatch5.1beta3

sambarsambar_serverMatch5.1beta4

sambarsambar_serverMatch5.1beta5

sambarsambar_serverMatch5.2

sambarsambar_serverMatch5.3

sambarsambar_serverMatch6.0beta1

sambarsambar_serverMatch6.0beta2

CPENameOperatorVersion
sambar:sambar_serversambar sambar servereq5.0
sambar:sambar_serversambar sambar servereq5.1
sambar:sambar_serversambar sambar servereq5.2
sambar:sambar_serversambar sambar servereq5.3
sambar:sambar_serversambar sambar servereq6.0

CPE	Name	Operator	Version
sambar:sambar_server	sambar sambar server	eq	5.0
sambar:sambar_server	sambar sambar server	eq	5.1
sambar:sambar_server	sambar sambar server	eq	5.2
sambar:sambar_server	sambar sambar server	eq	5.3
sambar:sambar_server	sambar sambar server	eq	6.0

References

archives.neohapsis.com/archives/bugtraq/2004-04/0353.html

secunia.com/advisories/9578

securitytracker.com/id?1007819

www.idefense.com/application/poi/display?id=103&type=vulnerabilities&flashstatus=true

www.osvdb.org/5781

www.sambar.com/security.htm

exchange.xforce.ibmcloud.com/vulnerabilities/16059

7.5 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

75.5%

JSON

Related for CVE-2003-1287

nvd1 cvelist1