CVE-2003-0648
published 2004-05-04CVE-2003-0648: Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code.
PriorityP434critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
5.17%
91.6th percentile
Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | fte | < fte 0.50.0-1.1 (bookworm) | fte 0.50.0-1.1 (bookworm) |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv10.0CRITICAL
vendor_debian10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g58g-pw3p-5p6g: Multiple buffer overflows in vfte, based on FTE, before 0
ghsa_unreviewed·2022-04-29
CVE-2003-0648 [HIGH] GHSA-g58g-pw3p-5p6g: Multiple buffer overflows in vfte, based on FTE, before 0
Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code.
OSV
CVE-2003-0648: Multiple buffer overflows in vfte, based on FTE, before 0
osv·2004-05-04·CVSS 10.0
CVE-2003-0648 [CRITICAL] CVE-2003-0648: Multiple buffer overflows in vfte, based on FTE, before 0
Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code.
Debian
CVE-2003-0648: fte - Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users ...
vendor_debian·2003·CVSS 10.0
CVE-2003-0648 [CRITICAL] CVE-2003-0648: fte - Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users ...
Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code.
Scope: local
bookworm: resolved (fixed in 0.50.0-1.1)
bullseye: resolved (fixed in 0.50.0-1.1)
forky: resolved (fixed in 0.50.0-1.1)
sid: resolved (fixed in 0.50.0-1.1)
trixie: resolved (fixed in 0.50.0-1.1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/11290http://securitytracker.com/id?1009655http://securitytracker.com/id?1009656http://www.debian.org/security/2004/dsa-472http://www.kb.cert.org/vuls/id/354838http://www.kb.cert.org/vuls/id/900964http://www.securityfocus.com/bid/10041https://exchange.xforce.ibmcloud.com/vulnerabilities/15726http://secunia.com/advisories/11290http://securitytracker.com/id?1009655http://securitytracker.com/id?1009656http://www.debian.org/security/2004/dsa-472http://www.kb.cert.org/vuls/id/354838http://www.kb.cert.org/vuls/id/900964http://www.securityfocus.com/bid/10041https://exchange.xforce.ibmcloud.com/vulnerabilities/15726
2004-05-04
Published