CVEvulnerability
CVE-2003-0333
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-05-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple buffer overflows in kermit in HP-UX 10.20 and 11.00 (C-Kermit 6.0.192 and possibly other versions before 8.0) allow local users to gain privileges via long arguments to (1) ask, (2) askq, (3) define, (4) assign, and (5) getc, some of which may share the same underlying function "doask," a different vulnerability than CVE-2001-0085.
Affected configurations
• hp hp-ux 10.20
• hp hp-ux 11.00
References
- http://archives.neohapsis.com/archives/hp/current/0044.html archives.neohapsis.com
- http://marc.info/?l=bugtraq&m=105189670912220&w=2 marc.info
- http://marc.info/?l=bugtraq&m=105190667523456&w=2 marc.info
- http://www.kb.cert.org/vuls/id/971364 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/7627 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11929 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/hp/current/0044.html archives.neohapsis.com
- http://marc.info/?l=bugtraq&m=105189670912220&w=2 marc.info
- http://marc.info/?l=bugtraq&m=105190667523456&w=2 marc.info
- http://www.kb.cert.org/vuls/id/971364 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/7627 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11929 exchange.xforce.ibmcloud.com