Vulnerabilities > CVE-2003-1287 - Denial-Of-Service vulnerability in Server

047910
CVSS 4.6 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
local
low complexity
sambar
NVD
Published: 2003-12-31
Updated: 2017-07-11

Summary

Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name such as com1.pl, con.pl, or aux.pl, which causes Perl to read the code from the associated device.

Vulnerable Configurations

Part Description Count
Application
Sambar
17

References