CVE-2003-0955

OpenBSD - 'ibcs2_exec' Kernel Code Execution

Severity Score

4.6

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code in 3.4 via a program with an invalid header that is not properly handled by (1) ibcs2_exec.c in the iBCS2 emulation (compat_ibcs2) or (2) exec_elf.c, which leads to a stack-based buffer overflow.

El Kernel OpenBSD 3.3 y 3.4 permite que usuarios locales causen una denegación de servicio (kernel panic) y posiblemente ejecuten código arbitrario en 3.4 mediante un programa con una cabecera inválida. Esto no lo maneja adecuadamente en (1) bcs2_exec.c o (2) exec_elf.c, que lleva a un desbordamiento de búfer.

*Credits: N/A

CVSS Scores

NISTv2 4.6

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2003-11-07 First Exploit
2003-11-19 CVE Reserved
2003-11-21 CVE Published
2023-03-08 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (9)

URL	Tag	Source
http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013315.html	Mailing List
http://marc.info/?l=openbsd-security-announce&m=106808820119679&w=2	X_refsource_confirm
http://marc.info/?l=openbsd-security-announce&m=106917441524978&w=2	X_refsource_confirm
http://www.securityfocus.com/bid/8978	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/118	2003-11-07
https://www.exploit-db.com/exploits/125	2003-11-19
http://www.guninski.com/msuxobsd2.html	2024-08-08

URL	Date	SRC
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/005_exec.patch	2016-10-18

URL	Date	SRC
http://www.openbsd.org/errata33.html	2016-10-18

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Openbsd Search vendor "Openbsd"		Openbsd Search vendor "Openbsd" for product "Openbsd"				3.3 Search vendor "Openbsd" for product "Openbsd" and version "3.3"		-		Affected
Openbsd Search vendor "Openbsd"		Openbsd Search vendor "Openbsd" for product "Openbsd"				3.4 Search vendor "Openbsd" for product "Openbsd" and version "3.4"		-		Affected