NVD

Id
70628  
Name
CVE-2004-0172  
Description
Heap-based buffer overflow in the search_for_command function of ltrace 0.3.10, if it is installed setuid, could allow local users to execute arbitrary code via a long filename. NOTE: It is unclear whether there are any packages that install ltrace as a setuid program, so this candidate might be REJECTed.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-03-15  
Modified Date
2017-07-10  
Seq
2004-0172  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
364181 70628 CVE-2004-0172 20031008 ltrace bug  View
364182 70628 CVE-2004-0172 20031008 ltrace bug  View
364183 70628 CVE-2004-0172 1007896  View
364184 70628 CVE-2004-0172 8790  View
364185 70628 CVE-2004-0172 ltrace-searchforcommand-bo(13389)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62715 JVNDB-2004-000056 ltrace の search_for_command() 関数におけるヒープオーバーフローの脆弱性 ltrace の options.c で使用されている search_for_command() 関数には、ファイル名の長さに対するチェックが不適切であるため、ヒープ領域でオーバーフローが発生する脆弱性が存在します。 CVE-2004-0172 8599 CVE-2004-0172 70628 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000056.html 2004-02-20 2007-06-28 View