CVE

Id
7528  
CVE No.
CVE-2003-0704  
Status
Candidate  
Description
KisMAC before 0.05d trusts user-supplied variables when chown"ing files or directories, which allows local users to gain privileges via the $DRIVER_KEXT environment variable in (1) viha_driver.sh, (2) macjack_load.sh, (3) airojack_load.sh, (4) setuid_enable.sh, (5) setuid_disable.sh, and using a "similar technique" for (6) viha_prep.sh and (7) viha_unprep.sh.  
Phase
Assigned (20030824)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
44255 7528 CVE-2003-0704 ATSTAKE:A082203-1  View
44256 7528 CVE-2003-0704 URL:http://www.atstake.com/research/advisories/2003/a082203-1.txt  View
44257 7528 CVE-2003-0704 BID:8497  View
44258 7528 CVE-2003-0704 URL:http://www.securityfocus.com/bid/8497  View
44259 7528 CVE-2003-0704 XF:kismac-setuid-modify-ownership(13009)  View
44260 7528 CVE-2003-0704 URL:http://xforce.iss.net/xforce/xfdb/13009  View
44261 7528 CVE-2003-0704 XF:kismac-viha-gain-privileges  View
44262 7528 CVE-2003-0704 URL:http://xforce.iss.net/xforce/xfdb/13010  View
44263 7528 CVE-2003-0704 XF:kismac-driverkext-modify-ownership  View

Related JVN