Vulnerability CVE-2003-0262
Published: 2003-05-27   Modified: 2012-02-12

Description:
leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges, which KATAXWR is not designed to have.

CVSS2 => (AV:L/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.2/10
10/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Leksbot -> Leksbot 

 References:
http://www.debian.org/security/2003/dsa-299
http://www.securityfocus.com/bid/7505
https://exchange.xforce.ibmcloud.com/vulnerabilities/11945
Copyright 2024, cxsecurity.com

 

Back to Top