CVE-2004-0834

Sažetak

Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3.

Reference

http://speedtouch.sourceforge.net/index.php?/news.en.html
http://sourceforge.net/project/showfiles.php?group_id=32758&package_id=28264&release_id=271734
https://exchange.xforce.ibmcloud.com/vulnerabilities/17792
http://www.mail-archive.com/speedtouch%40ml.free.fr/msg06688.html

CVSS

Base:	7.2
Impact:	10.0
Exploitability:	3.9

Pristup

Vektor	Složenost	Autentikacija
LOCAL	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:L/AC:L/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

07-11-2023 - 01:56

Objavljeno

23-12-2004 - 05:00