7.5

CVE-2003-0776

Exploit
saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sane ≫ Sane Version1.0.0
Sane ≫ Sane Version1.0.1
Sane ≫ Sane Version1.0.2
Sane ≫ Sane Version1.0.3
Sane ≫ Sane Version1.0.4
Sane ≫ Sane Version1.0.5
Sane ≫ Sane Version1.0.6
Sane ≫ Sane Version1.0.7
Sane ≫ Sane Version1.0.7_beta1
Sane ≫ Sane Version1.0.7_beta2
Sane ≫ Sane Version1.0.8
Sane ≫ Sane Version1.0.9
Sane ≫ Sane-backend Version1.0.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.76% 0.751
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt
http://www.debian.org/security/2003/dsa-379
Patch
Vendor Advisory
Exploit
http://www.mandriva.com/security/advisories?name=MDKSA-2003:099
http://www.novell.com/linux/security/advisories/2003_046_sane.html
http://www.redhat.com/support/errata/RHSA-2003-278.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2003-285.html
http://www.securityfocus.com/bid/8593