CVE-2003-0188 lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.
HighCVSS 7.2
EPSS 0.44%
- Published
- Updated
- Exploit status
- No public exploit known
Description
lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lv | = 4.49.1 | No fix listed |
| lv | = 4.49.2 | No fix listed |
| lv | = 4.49.3 | No fix listed |
| lv | = 4.49.4 | No fix listed |
| redhat lv | = 4.49.4-1 | No fix listed |
| redhat lv | = 4.49.4-3 | No fix listed |
| redhat lv | = 4.49.4-7 | No fix listed |
| redhat lv | = 4.49.4-9 | No fix listed |
| redhat linux | = 7.1 | No fix listed |
| redhat linux | = 7.2 | No fix listed |
| redhat linux | = 7.3 | No fix listed |
| redhat linux | = 8.0 | No fix listed |
| redhat linux | = 9.0 | No fix listed |
| debian/lv(Debian:12) | < 4.49.5-2 | 4.49.5-2 |
| debian/lv(Debian:13) | < 4.49.5-2 | 4.49.5-2 |
| debian/lv(Debian:14) | < 4.49.5-2 | 4.49.5-2 |
References
- DSA-304 patch vendor-advisory
- RHSA-2003:167 vendor-advisory
- RHSA-2003:169 patch vendor-advisory
- TLSA-2003-35 vendor-advisory
- oval:org.mitre.oval:def:430 signature vdb-entry
- Debian Security Tracker CVE-2003-0188 vendor-advisory