CVE-2003-0773

2003-09-2204:00:00

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.4

Confidence

Low

EPSS

0.013

Percentile

85.9%

JSON

saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf.

Affected configurations

Nvd

Node

sanesaneMatch1.0.0

sanesaneMatch1.0.1

sanesaneMatch1.0.2

sanesaneMatch1.0.3

sanesaneMatch1.0.4

sanesaneMatch1.0.5

sanesaneMatch1.0.6

sanesaneMatch1.0.7

sanesaneMatch1.0.7_beta1

sanesaneMatch1.0.7_beta2

sanesaneMatch1.0.8

sanesaneMatch1.0.9

sanesane-backendMatch1.0.10

VendorProductVersionCPE
sanesane1.0.0cpe:2.3:a:sane:sane:1.0.0:*:*:*:*:*:*:*
sanesane1.0.1cpe:2.3:a:sane:sane:1.0.1:*:*:*:*:*:*:*
sanesane1.0.2cpe:2.3:a:sane:sane:1.0.2:*:*:*:*:*:*:*
sanesane1.0.3cpe:2.3:a:sane:sane:1.0.3:*:*:*:*:*:*:*
sanesane1.0.4cpe:2.3:a:sane:sane:1.0.4:*:*:*:*:*:*:*
sanesane1.0.5cpe:2.3:a:sane:sane:1.0.5:*:*:*:*:*:*:*
sanesane1.0.6cpe:2.3:a:sane:sane:1.0.6:*:*:*:*:*:*:*
sanesane1.0.7cpe:2.3:a:sane:sane:1.0.7:*:*:*:*:*:*:*
sanesane1.0.7_beta1cpe:2.3:a:sane:sane:1.0.7_beta1:*:*:*:*:*:*:*
sanesane1.0.7_beta2cpe:2.3:a:sane:sane:1.0.7_beta2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sane	sane	1.0.0	cpe:2.3:a:sane:sane:1.0.0:::::::*
sane	sane	1.0.1	cpe:2.3:a:sane:sane:1.0.1:::::::*
sane	sane	1.0.2	cpe:2.3:a:sane:sane:1.0.2:::::::*
sane	sane	1.0.3	cpe:2.3:a:sane:sane:1.0.3:::::::*
sane	sane	1.0.4	cpe:2.3:a:sane:sane:1.0.4:::::::*
sane	sane	1.0.5	cpe:2.3:a:sane:sane:1.0.5:::::::*
sane	sane	1.0.6	cpe:2.3:a:sane:sane:1.0.6:::::::*
sane	sane	1.0.7	cpe:2.3:a:sane:sane:1.0.7:::::::*
sane	sane	1.0.7_beta1	cpe:2.3:a:sane:sane:1.0.7_beta1:::::::*
sane	sane	1.0.7_beta2	cpe:2.3:a:sane:sane:1.0.7_beta2:::::::*