{
    "id": "CVE-2003-0102",
    "published": "2003-03-18 05:00:00",
    "last_modified": "2026-06-16 22:01:31",
    "cvss_score": "4.6",
    "cvss_severity": "MEDIUM",
    "cvss_version": "2.0",
    "cvss_vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
    "cwe": null,
    "description": "Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).",
    "epss_score": "0.01982",
    "epss_percentile": "0.79925",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-08 18:17:04",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "file",
            "product": "file"
        },
        {
            "vendor": "netbsd",
            "product": "netbsd"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "22324",
            "title": "File 3.x - Local Stack Overflow Code Execution (1)",
            "date": "2003-03-04",
            "url": "https://www.exploit-db.com/exploits/22324"
        },
        {
            "source": "exploit-db",
            "ref_id": "22325",
            "title": "File 3.x - Local Stack Overflow Code Execution (2)",
            "date": "2003-03-04",
            "url": "https://www.exploit-db.com/exploits/22325"
        }
    ],
    "refs_list": [
        "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-003.txt.asc",
        "http://lwn.net/Alerts/34908/",
        "http://marc.info/?l=bugtraq&m=104680706201721&w=2",
        "http://www.debian.org/security/2003/dsa-260",
        "http://www.idefense.com/advisory/03.04.03.txt",
        "http://www.kb.cert.org/vuls/id/611865",
        "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:030",
        "http://www.novell.com/linux/security/advisories/2003_017_file.html",
        "http://www.redhat.com/support/errata/RHSA-2003-086.html",
        "http://www.redhat.com/support/errata/RHSA-2003-087.html",
        "http://www.securityfocus.com/bid/7008",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/11469",
        "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-003.txt.asc",
        "http://lwn.net/Alerts/34908/",
        "http://marc.info/?l=bugtraq&m=104680706201721&w=2",
        "http://www.debian.org/security/2003/dsa-260",
        "http://www.idefense.com/advisory/03.04.03.txt",
        "http://www.kb.cert.org/vuls/id/611865",
        "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:030",
        "http://www.novell.com/linux/security/advisories/2003_017_file.html",
        "http://www.redhat.com/support/errata/RHSA-2003-086.html",
        "http://www.redhat.com/support/errata/RHSA-2003-087.html",
        "http://www.securityfocus.com/bid/7008",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/11469"
    ]
}