CVE

Id
7276  
CVE No.
CVE-2003-0449  
Status
Candidate  
Description
Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to gain privileges via (1) a PATH environment variable that points to malicious libraries, as demonstrated using libjutil.so in_proapsv, or (2) the -installdir command line parameter, as demonstrated using librocket_r.so in _dbagent.  
Phase
Assigned (20030619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
42664 7276 CVE-2003-0449 BUGTRAQ:20030614 SRT2003-06-13-0945 - Progress PATH based dlopen() issue  View
42665 7276 CVE-2003-0449 URL:http://marc.info/?l=bugtraq&m=105561134624665&w=2  View
42666 7276 CVE-2003-0449 BUGTRAQ:20030614 SRT2003-06-13-1009 - Progress _dbagent -installdir dlopen() issue  View
42667 7276 CVE-2003-0449 URL:http://marc.info/?l=bugtraq&m=105561189625082&w=2  View
42668 7276 CVE-2003-0449 MISC:http://www.secnetops.com/research/advisories/SRT2003-06-13-0945.txt  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63475 JVNDB-2003-000201 Cistron RADIUS の NAS-Port 属性を含むパケットによるバッファオーバーフローの脆弱性 Cistron RADIUS には、 NAS-Port 属性の取り扱いの不備により、異常に長い値を与えられた NAS-Port 属性を含むパケットを受信した場合、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2003-0450 7276 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000201.html  View