CVE-2011-0765

2011-04-1002:55:01

[email protected]

web.nvd.nist.gov

cve-2011-0765

vulnerability

lft

pwhois

layer four traceroute

lft 3.x

local privilege escalation

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.3%

JSON

Unspecified vulnerability in lft in pWhois Layer Four Traceroute (LFT) 3.x before 3.3 allows local users to gain privileges via a crafted command line.

Affected configurations

NVD

Node

pwhoislayer_four_tracerouteMatch3.0

pwhoislayer_four_tracerouteMatch3.1

pwhoislayer_four_tracerouteMatch3.2

CPENameOperatorVersion
pwhois:layer_four_traceroutepwhois layer four tracerouteeq3.0
pwhois:layer_four_traceroutepwhois layer four tracerouteeq3.1
pwhois:layer_four_traceroutepwhois layer four tracerouteeq3.2

CPE	Name	Operator	Version
pwhois:layer_four_traceroute	pwhois layer four traceroute	eq	3.0
pwhois:layer_four_traceroute	pwhois layer four traceroute	eq	3.1
pwhois:layer_four_traceroute	pwhois layer four traceroute	eq	3.2