Lucene search
HistoryOct 17, 2007 - 1:00 a.m.
CVE-2003-1366
openbsd
chpass
vulnerability
local file read
hard link attack
cve-2003-1366
nvd
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
18.1%
chpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a hard link attack on a temporary file used to store user database information.
Affected configurations
Node
openbsdopenbsdMatch2.0
ORopenbsdopenbsdMatch2.1
ORopenbsdopenbsdMatch2.2
ORopenbsdopenbsdMatch2.3
ORopenbsdopenbsdMatch2.4
ORopenbsdopenbsdMatch2.5
ORopenbsdopenbsdMatch2.6
ORopenbsdopenbsdMatch2.7
ORopenbsdopenbsdMatch2.8
ORopenbsdopenbsdMatch2.9
ORopenbsdopenbsdMatch3.0
ORopenbsdopenbsdMatch3.1
ORopenbsdopenbsdMatch3.2
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
18.1%
Related for CVE-2003-1366