CVE-2017-1000203

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in the rootd daemon resulting in remote code execution

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Nov 17, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-10002069.8samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary cCVE-2017-10002078.8A vulnerability in Swagger-Parser's version <= 1.0.30 and Swagger codegen version <= 2.2.2 yaml parsing functionality results in arbitrary cCVE-2017-10002088.8A vulnerability in Swagger-Parser's (version <= 1.0.30) yaml parsing functionality results in arbitrary code being executed when a maliciousCVE-2017-10002095.9The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name (CCVE-2017-10002109.8picoTCP (versions 1.7.0 - 1.5.0) is vulnerable to stack buffer overflow resulting in code execution or denial of service attackCVE-2017-10002115.3Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can aCVE-2017-10002129.8Elixir's vim plugin, alchemist.vim is vulnerable to remote code execution in the bundled alchemist-server. A malicious website can execute rCVE-2017-10002134.8WBCE v1.1.11 is vulnerable to reflected XSS via the "begriff" POST parameter in /admin/admintools/tool.php?tool=user_searchCVE-2017-10002149.8GitPHP by xiphux is vulnerable to OS Command InjectionsCVE-2017-10002159.8ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code executionCVE-2017-10002178.8Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting inCVE-2017-10002189.8LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code exec
CVE-2017-1000203: High severity, CVSS 8.8 | Vulnix