Vulnerabilities > CVE-2004-1295 - Denial-Of-Service vulnerability in Uml-Utilities 20030903

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
local
low complexity
uml-utilities

Summary

The slip_down function in slip.c for the uml_net program in uml-utilities 20030903, when uml_net is installed setuid root, does not verify whether the calling user has sufficient permission to disable an interface, which allows local users to cause a denial of service (network service disabled).

Vulnerable Configurations

Part Description Count
Application
Uml-Utilities
1