- Description
- Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via the device name argument, as demonstrated in Sustworks IPNetSentryX and IPNetMonitorX the setuid program RunTCPFlow.
- Source
- cve@mitre.org
- NVD status
- Analyzed
CVSS 2.0
- Type
- Primary
- Base score
- 7.2
- Impact score
- 10
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:C/I:C/A:C
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:jeremy_elson:tcpflow:0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "704B1CD5-93D1-4909-A5AF-65BE72283F8A"
},
{
"criteria": "cpe:2.3:a:jeremy_elson:tcpflow:0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C080FBB4-3AF2-4B84-A5FC-5732009B4A37"
},
{
"criteria": "cpe:2.3:a:jeremy_elson:tcpflow:0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42DE7D19-8D47-4D3A-934D-E7E153C3F68E"
},
{
"criteria": "cpe:2.3:a:jeremy_elson:tcpflow:0.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "159236AE-4736-49D2-9643-0842C4B0BCA8"
}
],
"operator": "OR"
}
]
}
]