CVE-2003-1169 EXPLOIT
4.6
MEDIUM · CVSS 2.0 · EPSS 0.8% (pctl 56)
Patch early
A public exploit exists.
Description
DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users to bypass access restrictions by importing NukoInfo values in certain DATEV keys, which disables Nutzungskontrolle.
Scoring
| CVSS | 4.6 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 0.82% — more likely to be exploited than 56% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2003-12-31 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| datev | nutzungskontrolle |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | DATEV Nutzungskontrolle 2.1/2.2 - Unauthorized Access | 2003-11-01 |
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013113.html
- http://www.securityfocus.com/bid/8950
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13589
- http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013113.html
- http://www.securityfocus.com/bid/8950
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13589
→ the Explorer · watch your stack · NVD