National Vulnerability Database (CVE-2003-0649)

National Cyber-Alert System Vulnerability Summary: CVE-2003-0649
Orirignal release date: 2003-08-27 Source: US-CERT/NIST ### Overview Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long HOME environment variable. ### Impact CVSS Severity: 7 (High) Range: local Authentication: input buffer="1" Impact Type: sec_prot admin="1" other="1" ### Reference to Advisories, Solutions, and Tools External Source: Security Focus Name: BID: 8370 Hyperlink: http://www.securityfocus.com/bid/8370 External Source: Debian Name: DSA-368 Hyperlink: http://www.debian.org/security/2003/dsa-368 External Source: MANDRAKE Name: MDKSA-2004:053 Hyperlink: http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:053 ### Vulnerable Software and Vendor xpcd (xpcd) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0649