CVE

Id
7597  
CVE No.
CVE-2003-0773  
Status
Candidate  
Description
saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf.  
Phase
Assigned (20030910)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
44607 7597 CVE-2003-0773 DEBIAN:DSA-379  View
44608 7597 CVE-2003-0773 URL:http://www.debian.org/security/2003/dsa-379  View
44609 7597 CVE-2003-0773 REDHAT:RHSA-2003:278  View
44610 7597 CVE-2003-0773 URL:http://www.redhat.com/support/errata/RHSA-2003-278.html  View
44611 7597 CVE-2003-0773 REDHAT:RHSA-2003:285  View
44612 7597 CVE-2003-0773 URL:http://www.redhat.com/support/errata/RHSA-2003-285.html  View
44613 7597 CVE-2003-0773 MANDRAKE:MDKSA-2003:099  View
44614 7597 CVE-2003-0773 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2003:099  View
44615 7597 CVE-2003-0773 SUSE:SuSE-SA:2003:046  View
44616 7597 CVE-2003-0773 URL:http://www.novell.com/linux/security/advisories/2003_046_sane.html  View
44617 7597 CVE-2003-0773 SCO:CSSA-2004-005.0  View
44618 7597 CVE-2003-0773 URL:ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt  View
44619 7597 CVE-2003-0773 BID:8595  View
44620 7597 CVE-2003-0773 URL:http://www.securityfocus.com/bid/8595  View
44621 7597 CVE-2003-0773 BID:8593  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63569 JVNDB-2003-000295 saned のコネクションの中断検知機能におけるセグメンテーションフォルトの脆弱性 SANE sane-backend に同梱されている saned にはコネクションの中断を検知するのに時間がかかるため、割り当てられたメモリを消費しつくし、セグメンテーションフォルトが発生する問題が存在します。 CVE-2003-0774 7597 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000295.html  View