CVE-2003-0102
CVE-2003-0102
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
EPSS 2.0% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.idefense.com/advisory/03.04.03.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11469
- http://www.redhat.com/support/errata/RHSA-2003-087.html
- http://www.novell.com/linux/security/advisories/2003_017_file.html
- http://www.securityfocus.com/bid/7008
- http://marc.info/?l=bugtraq&m=104680706201721&w=2
- http://lwn.net/Alerts/34908/
- http://www.redhat.com/support/errata/RHSA-2003-086.html
- http://www.debian.org/security/2003/dsa-260
- http://www.kb.cert.org/vuls/id/611865
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:030
- https://nvd.nist.gov/vuln/detail/CVE-2003-0102