First published: Sat May 17 2003(Updated: )
lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Redhat LVM | =4.49.4-3 | |
lesstif | =4.49.1 | |
Redhat LVM | =4.49.4-9 | |
Redhat LVM | =4.49.4-7 | |
lesstif | =4.49.2 | |
lesstif | =4.49.4 | |
lesstif | =4.49.3 | |
Redhat LVM | =4.49.4-1 | |
Red Hat Linux | =7.2 | |
Red Hat Linux | =8.0 | |
Red Hat Linux | =7.3 | |
Red Hat Linux | =9.0 | |
Red Hat Linux | =7.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2003-0188 allows local users to execute arbitrary commands as other lv users by placing malicious .lv files in accessible directories.
CVE-2003-0188 affects lv versions 4.49.1, 4.49.2, 4.49.3, and 4.49.4.
To fix CVE-2003-0188, update lv to a patched version where the vulnerability has been mitigated.
The risks of CVE-2003-0188 include unauthorized command execution which could lead to data compromise or system integrity issues.
CVE-2003-0188 impacts local users of systems running vulnerable versions of the lv application.