CVE-2003-0773 saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restric...
HighCVSS 7.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sane | = 1.0.0 | No fix listed |
| sane | = 1.0.1 | No fix listed |
| sane | = 1.0.2 | No fix listed |
| sane | = 1.0.3 | No fix listed |
| sane | = 1.0.4 | No fix listed |
| sane | = 1.0.5 | No fix listed |
| sane | = 1.0.6 | No fix listed |
| sane | = 1.0.7 | No fix listed |
| sane | = 1.0.7_beta1 | No fix listed |
| sane | = 1.0.7_beta2 | No fix listed |
| sane | = 1.0.8 | No fix listed |
| sane | = 1.0.9 | No fix listed |
| sane-backend | = 1.0.10 | No fix listed |
| debian/sane-backends(Debian:12) | < 1.0.11-1 | 1.0.11-1 |
| debian/sane-backends(Debian:13) | < 1.0.11-1 | 1.0.11-1 |
| debian/sane-backends(Debian:14) | < 1.0.11-1 | 1.0.11-1 |
References
- DSA-379 vendor-advisory
- MDKSA-2003:099 vendor-advisory
- SuSE-SA:2003:046 vendor-advisory
- RHSA-2003:278 patch vendor-advisory
- RHSA-2003:285 vendor-advisory
- 8593 vdb-entry
- 8595 patch vdb-entry vendor-advisory
- Debian Security Tracker CVE-2003-0773 vendor-advisory