CVE-2004-0103 : crawl before 4.0.0 beta23 does not properly "apply a size check" when copying a

crawl before 4.0.0 beta23 does not properly "apply a size check" when copying a certain environment variable, which may allow local users to gain privileges, possibly as a result of a buffer overflow.

Published 2004-03-03 05:00:00

Updated 2017-07-11 01:29:54

Source MITRE

View at NVD, CVE.org

Vulnerability category: Overflow

Products affected by CVE-2004-0103

Linley Henzell » Crawl
Versions up to, including, (<=) 4.0.0_b23
cpe:2.3:a:linley_henzell:crawl:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2004-0103

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2004-0103

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2004-0103

http://www.debian.org/security/2004/dsa-432

Debian -- The Universal Operating System
Patch;Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15032
http://www.securityfocus.com/bid/9566

Jump to

Vulnerability Details : CVE-2004-0103

Products affected by CVE-2004-0103

Exploit prediction scoring system (EPSS) score for CVE-2004-0103

CVSS scores for CVE-2004-0103

References for CVE-2004-0103