high7.2Public exploit code
CVE-2003-0584
Format string vulnerability in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code vi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Tolis Group BRU 17.0 - Local Privilege Escalation (2)2003-07-16 · local · unix · Verified
- Tolis Group BRU 17.0 - Local Privilege Escalation (1)2003-07-16 · local · unix · Verified
Impact
Format string vulnerability in Backup and Restore Utility for Unix (BRU) 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tolis Group | Bru | through 17.0 |