Lucene search

[email protected]CVE-2003-1445

HistoryOct 23, 2007 - 1:00 a.m.

CVE-2003-1445

2007-10-2301:00:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2003-1445

far manager

buffer overflow

denial of service

crash

arbitrary code

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Stack-based buffer overflow in Far Manager 1.70beta1 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long pathname.

Affected configurations

NVD

Node

rarlabfar_managerMatch1.65

rarlabfar_managerMatch1.70_beta_1

rarlabfar_managerMatch1.70_beta_4

CPENameOperatorVersion
rarlab:far_managerrarlab far managereq1.65
rarlab:far_managerrarlab far managereq1.70_beta_1
rarlab:far_managerrarlab far managereq1.70_beta_4

CPE	Name	Operator	Version
rarlab:far_manager	rarlab far manager	eq	1.65
rarlab:far_manager	rarlab far manager	eq	1.70_beta_1
rarlab:far_manager	rarlab far manager	eq	1.70_beta_4

References

securityreason.com/securityalert/3281

www.securityfocus.com/archive/1/311334

www.securityfocus.com/bid/6822

exchange.xforce.ibmcloud.com/vulnerabilities/11293

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2003-1445

nvd1 cvelist1 kaspersky1