NetSight
high7.5

CVE-2003-0773

saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers …

Impact

saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf.

Affected products

VendorProductAffected versions
SaneSane
Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5
SaneSane-Backend
Version 1.0.10

References