Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client.
References
| Link | Resource |
|---|---|
| http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0047.html | Broken Link |
| http://secunia.com/advisories/7979 | Broken Link |
| http://secunia.com/advisories/8114 | Broken Link |
| http://www.mandriva.com/security/advisories?name=MDKSA-2003:021 | Third Party Advisory |
| http://www.redhat.com/support/errata/RHSA-2003-020.html | Broken Link Patch Vendor Advisory |
| http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0047.html | Broken Link |
| http://secunia.com/advisories/7979 | Broken Link |
| http://secunia.com/advisories/8114 | Broken Link |
| http://www.mandriva.com/security/advisories?name=MDKSA-2003:021 | Third Party Advisory |
| http://www.redhat.com/support/errata/RHSA-2003-020.html | Broken Link Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
20 Nov 2024, 23:43
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0047.html - Broken Link | |
| References | () http://secunia.com/advisories/7979 - Broken Link | |
| References | () http://secunia.com/advisories/8114 - Broken Link | |
| References | () http://www.mandriva.com/security/advisories?name=MDKSA-2003:021 - Third Party Advisory | |
| References | () http://www.redhat.com/support/errata/RHSA-2003-020.html - Broken Link, Patch, Vendor Advisory |
02 Feb 2024, 15:13
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MANDRAKE) http://www.mandriva.com/security/advisories?name=MDKSA-2003:021 - Third Party Advisory | |
| References | (SECUNIA) http://secunia.com/advisories/8114 - Broken Link | |
| References | (REDHAT) http://www.redhat.com/support/errata/RHSA-2003-020.html - Broken Link, Patch, Vendor Advisory | |
| References | (VULNWATCH) http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0047.html - Broken Link | |
| References | (SECUNIA) http://secunia.com/advisories/7979 - Broken Link | |
| CPE | cpe:2.3:o:redhat:linux:7.2:*:i386:*:*:*:*:* cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:* cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:* cpe:2.3:o:redhat:linux:7.2:*:ia64:*:*:*:*:* cpe:2.3:o:redhat:linux:8.0:*:i386:*:*:*:*:* cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:* |
cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:* cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:* cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:* cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:* cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:* |
| First Time |
Mandrakesoft
Mandrakesoft mandrake Multi Network Firewall Mandrakesoft mandrake Linux |
|
| CWE | CWE-78 |
Information
Published : 2003-02-19 05:00
Updated : 2024-11-20 23:43
NVD link : CVE-2003-0041
Mitre link : CVE-2003-0041
CVE.ORG link : CVE-2003-0041
JSON object : View
Products Affected
redhat
- linux
mandrakesoft
- mandrake_linux
- mandrake_multi_network_firewall
mit
- kerberos_ftp_client
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')