Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2003-1399
HistoryOct 19, 2007 - 10:00 a.m.

CVE-2003-1399

2007-10-1910:00:00
Debian Security Bug Tracker
security-tracker.debian.org
7

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%

eject 2.0.10, when installed setuid on systems such as SuSE Linux 7.3, generates different error messages depending on whether a specified file exists or not, which allows local users to obtain sensitive information.

OSVersionArchitecturePackageVersionFilename
Debian10alleject< 2.0.13-1eject_2.0.13-1_all.deb

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%

Related for DEBIANCVE:CVE-2003-1399