Description
Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via the device name argument, as demonstrated in Sustworks IPNetSentryX and IPNetMonitorX the setuid program RunTCPFlow.
Unscored
CVE-2003-0671
EUVD-2003-0665GHSA-787m-83jr-r46c
Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via the device name arg…
Published Aug 14, 2003 · Updated Sep 17, 2024 · Assigned by mitre