HIGH
xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges
Published Apr 15, 2003
7.2
HIGHCVSS 2.0
EPSS 0.49%
Description
xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.
Affected products
No data.
OR
- 2.0.0
- 2.0.1
- 2.0.2
- 2.0.3
- 2.0.4
- 2.0.5
- 6.5
- 6.5.1
- 6.5.2
- 6.5.2f
- 6.5.2m
- 6.5.3
- 6.5.3f
- 6.5.3m
- 6.5.4
- 6.5.4f
- 6.5.4m
- 6.5.5
- 6.5.5f
- 6.5.5m
- 6.5.6
- 6.5.6f
- 6.5.6m
- 6.5.7
- 6.5.7f
- 6.5.7m
- 6.5.8
- 6.5.8f
- 6.5.8m
- 6.5.9
- 6.5.9f
- 6.5.9m
- 6.5.10
- 6.5.10f
- 6.5.10m
- 6.5.11
- 6.5.11f
- 6.5.11m
- 6.5.12
- 6.5.12f
- 6.5.12m
- 6.5.13
- 6.5.13f
- 6.5.13m
- 6.5.14
- 6.5.14f
- 6.5.14m
- 6.5.15
- 6.5.15f
- 6.5.15m
- 6.5.16
- 6.5.16f
- 6.5.16m
- 6.5.17
- 6.5.17f
- 6.5.17m
- 6.5.18
- 6.5.18f
- 6.5.18m
- 6.5.19
- 6.5.19f
- 6.5.19m
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (5)
- ftp://patches.sgi.com/support/free/security/advisories/20030404-01-P vendor-advisoryx_refsource_SGIPatchVendor Advisory
- http://www.debian.org/security/2003/dsa-283 vendor-advisoryx_refsource_DEBIANPatchVendor Advisory
- http://www.kb.cert.org/vuls/id/111673 third-party-advisoryx_refsource_CERT-VNUS Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:047 vendor-advisoryx_refsource_MANDRAKE
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2003-0169 Advisory
| Link | Providers | Tags |
|---|---|---|
| ftp://patches.sgi.com/support/free/security/advisories/20030404-01-P | vendor-advisoryx_refsource_SGIPatchVendor Advisory | |
| http://www.debian.org/security/2003/dsa-283 | vendor-advisoryx_refsource_DEBIANPatchVendor Advisory | |
| http://www.kb.cert.org/vuls/id/111673 | third-party-advisoryx_refsource_CERT-VNUS Government Resource | |
| http://www.mandriva.com/security/advisories?name=MDKSA-2003:047 | vendor-advisoryx_refsource_MANDRAKE | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2003-0169 | Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 15, 2003
Updated Aug 8, 2024
Reserved Mar 28, 2003
Link CVE-2003-0173
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2003-0169 Assigner mitre
Published Apr 15, 2003
Updated Aug 8, 2024
Exploited since n/a
Link EUVD-2003-0169