CVE-2003-0390 EXPLOIT
4.6
MEDIUM · CVSS 2.0 · EPSS 1% (pctl 63)
Patch early
A public exploit exists.
Description
Multiple buffer overflows in Options Parsing Tool (OPT) shared library 3.18 and earlier, when used in setuid programs, may allow local users to execute arbitrary code via long command line options that are fed into macros such as opt_warn_2, as used in functions such as opt_atoi.
Scoring
| CVSS | 4.6 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 1.03% — more likely to be exploited than 63% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2003-07-02 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| james theiler | opt |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Libopt.a 3.1x - Error Logging Buffer Overflow (1) | 2003-04-24 |
| exploit-db | Libopt.a 3.1x - Error Logging Buffer Overflow (2) | 2003-04-24 |
References
- http://marc.info/?l=bugtraq&m=105121918523320&w=2
- http://marc.info/?l=bugtraq&m=105371246204866&w=2
- http://nis-www.lanl.gov/~jt/Software/opt/opt-3.19.tar.gz
- http://marc.info/?l=bugtraq&m=105121918523320&w=2
- http://marc.info/?l=bugtraq&m=105371246204866&w=2
- http://nis-www.lanl.gov/~jt/Software/opt/opt-3.19.tar.gz
→ the Explorer · watch your stack · NVD