CVE-2003-0489

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2003/dsa-330Patch, Vendor Advisory
http://www.debian.org/security/2003/dsa-330Patch, Vendor Advisory

Timeline

Published: Aug 7, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-04907.2The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical directories and files w CVE-2003-04917.5The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image CVE-2003-04926.8Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web CVE-2003-049310.0Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after ob CVE-2003-049410.0password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direc CVE-2003-04954.3Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item.CVE-2003-04967.2Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extend CVE-2003-04977.2Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying ca CVE-2003-04987.2Caché Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows local users to execute arbitrary code by add CVE-2003-04993.6Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perf CVE-2003-050010.0SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers t CVE-2003-05012.1The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a