CVE-2003-0385
published 2003-07-02CVE-2003-0385: Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option.
PriorityP426high7.2CVSS 2.0
AVLACLAuNCCICAC
EXPLOIT
EPSS
0.86%
53.8th percentile
Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | xaos | < xaos 3.1r-4 (bookworm) | xaos 3.1r-4 (bookworm) |
CVSS provenance
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
osv7.2HIGH
vendor_debian7.2HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-q3hr-92fv-qfpf: Buffer overflow in xaos 3
ghsa_unreviewed·2022-04-29
CVE-2003-0385 [HIGH] GHSA-q3hr-92fv-qfpf: Buffer overflow in xaos 3
Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option.
OSV
CVE-2003-0385: Buffer overflow in xaos 3
osv·2003-07-02·CVSS 7.2
CVE-2003-0385 [HIGH] CVE-2003-0385: Buffer overflow in xaos 3
Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option.
Debian
CVE-2003-0385: xaos - Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local us...
vendor_debian·2003·CVSS 7.2
CVE-2003-0385 [HIGH] CVE-2003-0385: xaos - Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local us...
Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option.
Scope: local
bookworm: resolved (fixed in 3.1r-4)
bullseye: resolved (fixed in 3.1r-4)
forky: resolved (fixed in 3.1r-4)
sid: resolved (fixed in 3.1r-4)
trixie: resolved (fixed in 3.1r-4)
No detection rules found.
No writeups or analysis indexed.
2003-07-02
Published