high7.2
CVE-2003-0671
Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via the device name argument, as demonstrat…
Impact
Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via the device name argument, as demonstrated in Sustworks IPNetSentryX and IPNetMonitorX the setuid program RunTCPFlow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jeremy Elson | Tcpflow | Versions 0.10, 0.11, 0.12, 0.20 |