5

CVE-2003-1379

EPSS 0.27%
Veröffentlicht 31.12.2003 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

clarkconnectd in ClarkConnect Linux 1.2 allows remote attackers to obtain sensitive information about the server via the characters (1) A, which reveals the date and time, (2) F, (3) M, which reveals 'ifconfig' information, (4) P, which lists the processes, (5) Y, which reveals the snort log files, or (6) b, which reveals /var/log/messages.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Point Clark Networks ≫ Clarkconnect Version1.2 Editionlinux

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.27%	0.505

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.securityfocus.com/archive/1/313080

http://www.securityfocus.com/bid/6934

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/11419

https://nvd.nist.gov/vuln/detail/CVE-2003-1379

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2003-1379

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2003-1379

EUVD