CVE-2003-0489

{"id": "CVE-2003-0489", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2003-08-07T04:00:00.000", "references": [{"url": "http://www.debian.org/security/2003/dsa-330", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute."}, {"lang": "es", "value": "tcptraceroute 1.4 y anteriores tiene un fallo al soltar los privilegios de root despu\u00e9s de obtener un descriptor de fichero para capturar paquetes, lo que puede permitir que usuarios locales ganen acceso al descriptor mediante una vulnerabilidad seperar en tcptraceroute."}], "lastModified": "2008-09-05T20:34:26.707", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:michael_c._toren:tcptraceroute:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37E147F9-897D-454C-9F73-F94DEE8246CE", "versionEndIncluding": "1.4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}