VULNERABILITY INTELLIGENCE

CVE-2003-0671

CVSS score7.2 HIGH
EPSS probability0.55%
CISA KEVNot currently listed
Published2003-08-27
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via the device name argument, as demonstrated in Sustworks IPNetSentryX and IPNetMonitorX the setuid program RunTCPFlow.

Primary references