CVE-2003-0074 Format string vulnerability in mpmain.c for plpnfsd of the plptools package allows remote attackers to execute arbitrary code via the functions (1) debuglog, (2) errorlog, and (3) infolog.
HighCVSS 7.2
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in mpmain.c for plpnfsd of the plptools package allows remote attackers to execute arbitrary code via the functions (1) debuglog, (2) errorlog, and (3) infolog.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| plptools | = 0.6 | No fix listed |
| debian/plptools(Debian:12) | < 0.12-0 | 0.12-0 |
| debian/plptools(Debian:13) | < 0.12-0 | 0.12-0 |
| debian/plptools(Debian:14) | < 0.12-0 | 0.12-0 |
References
- 20030129 Local root vuln in SuSE 8.0 plptools package mailing-list
- 20030129 Re: Local root vuln in SuSE 8.0 plptools package mailing-list
- plptools-plpnsfd-format-string(11193) vdb-entry
- 6715 patch vdb-entry vendor-advisory
- Debian Security Tracker CVE-2003-0074 vendor-advisory