CVE-2003-1023

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Midnight Commander是一个UNIX系统下使用的文件管理工具。 Midnight Commander使用未初始化的缓冲区处理VFS的符号连接，本地攻击者利用这个漏洞可以进行缓冲区溢出攻击。 攻击者可以构建特殊的文档，诱使其他高级用户使用Midnight Commander打开时，可触发溢出，精心构建文档数据可能提升权限。

CVE-2003-1023 affects n/a n/a. High exploitation probability; assess promptly. Midnight Commander是一个UNIX系统下使用的文件管理工具。 Midnight Commander使用未初始化的缓冲区处理VFS的符号连接，本地攻击者利用这个漏洞可以进行缓冲区溢出攻击。 攻击者可以构建特殊的文档，诱使其他高级用户使用Midnight Commander打开时，可触发溢出，精心构建文档数据可能提升权限。 CVE-2003-1023 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2003-1023

I. Basic Information for CVE-2003-1023

Affected Products

II. Public POCs for CVE-2003-1023

III. Intelligence Information for CVE-2003-1023

Vendor Advisories for CVE-2003-1023 (16)

• http://www.securityfocus.com/bid/8658 vdb-entry x_refsource_BID
• http://secunia.com/advisories/9833 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/11268 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/10772 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/10645 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/10685 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/11262 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/11219 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/11296 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/10716 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/10823 third-party-advisory x_refsource_SECUNIA
• http://www.debian.org/security/2004/dsa-424 vendor-advisory x_refsource_DEBIAN
• http://rhn.redhat.com/errata/RHSA-2004-035.html vendor-advisory x_refsource_REDHAT
• http://rhn.redhat.com/errata/RHSA-2004-034.html vendor-advisory x_refsource_REDHAT
• http://www.mandriva.com/security/advisories?name=MDKSA-2004:007 vendor-advisory x_refsource_MANDRAKE
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13247 vdb-entry x_refsource_XF

Mailing List Discussions for CVE-2003-1023 (2)

• http://archive.cert.uni-stuttgart.de/bugtraq/2003/09/msg00309.html mailing-list x_refsource_BUGTRAQ
• http://marc.info/?l=bugtraq&m=108118433222764&w=2 mailing-list x_refsource_BUGTRAQ

Other References for CVE-2003-1023 (6)

• http://www.redhat.com/archives/fedora-legacy-announce/2004-May/msg00002.html vendor-advisory x_refsource_FEDORA
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000833 vendor-advisory x_refsource_CONECTIVA
• ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc vendor-advisory x_refsource_SGI
• ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc vendor-advisory x_refsource_SGI
• http://fedoranews.org/updates/FEDORA-2004-058.shtml vendor-advisory x_refsource_FEDORA
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-014.0.txt vendor-advisory x_refsource_CALDERA

• https://www.cve.org/CVERecord?id=CVE-2003-1023

Same Patch Batch · n/a · 2004-01-06 · 4 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2003-1023