high7.2Public exploit code
CVE-2003-0947
Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wireless Tools 26 (IWConfig) - ARGV Local Command Line Buffer Overflow (3)2003-10-27 · local · linux · Verified
- Wireless Tools 26 (IWConfig) - ARGV Local Command Line Buffer Overflow (2)2003-11-11 · local · linux · Verified
- Wireless Tools 26 (IWConfig) - ARGV Local Command Line Buffer Overflow (1)2003-10-27 · local · linux · Verified
- Wireless Tools 26 (IWConfig) - Local Privilege Escalation2005-09-14 · local · linux · Verified
Impact
Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wireless Tools Project | Wireless Tools | Versions 19, 20, 21, 22, 23, 24 |