CVE-2003-0041

Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client.
Configurations

Configuration 1 (hide)

cpe:2.3:a:mit:kerberos_ftp_client:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*
cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*

History

02 Feb 2024, 15:13

Type Values Removed Values Added
CWE NVD-CWE-Other CWE-78
CPE cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*
cpe:2.3:o:redhat:linux:8.0:*:i386:*:*:*:*:*
cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*
cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*
cpe:2.3:o:redhat:linux:7.1:*:i386:*:*:*:*:*
cpe:2.3:o:redhat:linux:7.2:*:i386:*:*:*:*:*
cpe:2.3:o:redhat:linux:7.2:*:ia64:*:*:*:*:*
cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*
cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*
cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*
First Time Mandrakesoft mandrake Linux
Mandrakesoft
Mandrakesoft mandrake Multi Network Firewall
References () http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0047.html - () http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0047.html - Broken Link
References () http://secunia.com/advisories/7979 - () http://secunia.com/advisories/7979 - Broken Link
References () http://secunia.com/advisories/8114 - () http://secunia.com/advisories/8114 - Broken Link
References () http://www.mandriva.com/security/advisories?name=MDKSA-2003:021 - () http://www.mandriva.com/security/advisories?name=MDKSA-2003:021 - Third Party Advisory
References () http://www.redhat.com/support/errata/RHSA-2003-020.html - Patch, Vendor Advisory () http://www.redhat.com/support/errata/RHSA-2003-020.html - Broken Link, Patch, Vendor Advisory

Information

Published : 2003-02-19 05:00

Updated : 2024-02-02 15:13


NVD link : CVE-2003-0041

Mitre link : CVE-2003-0041

CVE.ORG link : CVE-2003-0041


JSON object : View

Products Affected

mandrakesoft

  • mandrake_linux
  • mandrake_multi_network_firewall

mit

  • kerberos_ftp_client

redhat

  • linux
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')