Details of VAR-200312-0258

ID

VAR-200312-0258

CVE

CVE-2003-0947

TITLE

iwconfig Buffer overflow vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200312-041

DESCRIPTION

Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable. iwconfig is prone to a local security vulnerability

Trust: 1.26

sources: NVD: CVE-2003-0947 // BID: 82721 // VULHUB: VHN-7772

AFFECTED PRODUCTS

vendor:	tools	model:	wireless tools	scope:	eq	version:	23	Trust: 1.6
vendor:	tools	model:	wireless tools	scope:	eq	version:	24	Trust: 1.6
vendor:	tools	model:	wireless tools	scope:	eq	version:	21	Trust: 1.6
vendor:	tools	model:	wireless tools	scope:	eq	version:	26	Trust: 1.6
vendor:	tools	model:	wireless tools	scope:	eq	version:	25	Trust: 1.6
vendor:	tools	model:	wireless tools	scope:	eq	version:	20	Trust: 1.6
vendor:	tools	model:	wireless tools	scope:	eq	version:	19	Trust: 1.6
vendor:	tools	model:	wireless tools	scope:	eq	version:	22	Trust: 1.6
vendor:	-	model:	tools for linux wireless tools version	scope:	eq	version:	26	Trust: 0.3
vendor:	-	model:	tools for linux wireless tools version	scope:	eq	version:	25	Trust: 0.3
vendor:	-	model:	tools for linux wireless tools version	scope:	eq	version:	24	Trust: 0.3
vendor:	-	model:	tools for linux wireless tools version	scope:	eq	version:	23	Trust: 0.3
vendor:	-	model:	tools for linux wireless tools version	scope:	eq	version:	22	Trust: 0.3
vendor:	-	model:	tools for linux wireless tools version	scope:	eq	version:	21	Trust: 0.3
vendor:	-	model:	tools for linux wireless tools version	scope:	eq	version:	20	Trust: 0.3
vendor:	-	model:	tools for linux wireless tools version	scope:	eq	version:	19	Trust: 0.3

sources: BID: 82721 // CNNVD: CNNVD-200312-041 // NVD: CVE-2003-0947

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2003-0947
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-200312-041
value:	HIGH
Trust: 0.6
VULHUB:	VHN-7772
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2003-0947
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-7772
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-7772 // CNNVD: CNNVD-200312-041 // NVD: CVE-2003-0947

PROBLEMTYPE DATA

problemtype:

CWE-120

Trust: 1.0

sources: NVD: CVE-2003-0947

THREAT TYPE

local

Trust: 0.9

sources: BID: 82721 // CNNVD: CNNVD-200312-041

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-200312-041

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-7772

PATCH

title:

iwconfig Buffer error vulnerability fix

url:

http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=196943

Trust: 0.6

sources: CNNVD: CNNVD-200312-041

EXTERNAL IDS

db:	NVD	id:	CVE-2003-0947	Trust: 2.0
db:	CNNVD	id:	CNNVD-200312-041	Trust: 0.7
db:	BID	id:	82721	Trust: 0.4
db:	EXPLOIT-DB	id:	1215	Trust: 0.1
db:	EXPLOIT-DB	id:	23301	Trust: 0.1
db:	EXPLOIT-DB	id:	23300	Trust: 0.1
db:	EXPLOIT-DB	id:	23299	Trust: 0.1
db:	SEEBUG	id:	SSVID-77072	Trust: 0.1
db:	SEEBUG	id:	SSVID-77071	Trust: 0.1
db:	SEEBUG	id:	SSVID-77070	Trust: 0.1
db:	VULHUB	id:	VHN-7772	Trust: 0.1

sources: VULHUB: VHN-7772 // BID: 82721 // CNNVD: CNNVD-200312-041 // NVD: CVE-2003-0947

REFERENCES

url:	http://marc.info/?l=bugtraq&m=106867458902521&w=2	Trust: 1.6
url:	http://marc.theaimsgroup.com/?l=bugtraq&m=106867458902521&w=2	Trust: 0.3
url:	http://marc.info/?l=bugtraq&m=106867458902521&w=2	Trust: 0.1

sources: VULHUB: VHN-7772 // BID: 82721 // CNNVD: CNNVD-200312-041 // NVD: CVE-2003-0947

CREDITS

Unknown

Trust: 0.3

sources: BID: 82721

SOURCES

db:	VULHUB	id:	VHN-7772
db:	BID	id:	82721
db:	CNNVD	id:	CNNVD-200312-041
db:	NVD	id:	CVE-2003-0947

LAST UPDATE DATE

2024-08-14T14:16:12.545000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-7772	date:	2016-10-18T00:00:00
db:	BID	id:	82721	date:	2003-12-15T00:00:00
db:	CNNVD	id:	CNNVD-200312-041	date:	2022-06-30T00:00:00
db:	NVD	id:	CVE-2003-0947	date:	2022-06-21T15:49:07.233

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-7772	date:	2003-12-15T00:00:00
db:	BID	id:	82721	date:	2003-12-15T00:00:00
db:	CNNVD	id:	CNNVD-200312-041	date:	2003-12-15T00:00:00
db:	NVD	id:	CVE-2003-0947	date:	2003-12-15T05:00:00