CVE Details for CVE: CVE-2003-1122
Summary
ScriptLogic 4.01, and possibly other versions before 4.14, uses insecure permissions for the LOGS$ share, which allows users to modify log records and possibly execute arbitrary code.
| Timestamps | |
|---|---|
| Last major update | 11-07-2017 - 01:29 |
| Published | 31-12-2003 - 05:00 |
| Last modified | 11-07-2017 - 01:29 |
CWE
CVSS
Base
2.1
Impact
2.9
Exploitability
3.9
Access
| Vector | Complexity | Authentication |
|---|---|---|
| LOCAL | LOW | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| NONE | PARTIAL | NONE |
CVSS3
None
VIA4 references
cvss-vector
via4
refmap
via4
| bid | 7476 |
| cert-vn | VU#813737 |
| misc | http://www.kb.cert.org/vuls/id/CRDY-5EXQT9 |
| xf | scriptlogic-logs$-insecure-permissions(11922) |