CVE-2003-0703 - CVE House
Back to Database
Status published High CVE-2003-0703

KisMAC before 0.05d trusts user-supplied variables to load arbitrary kernels...

Vulnerability Description

KisMAC before 0.05d trusts user-supplied variables to load arbitrary kernels or kernel modules, which allows local users to gain privileges via the $DRIVER_KEXT environment variable as used in (1) viha_driver.sh, (2) macjack_load.sh, or (3) airojack_load.sh, or (4) via "similar techniques" using exchangeKernel.sh.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2003-0703

Credits & Attribution

No credits recorded in the NVD database.

References

More from kismac

View All →
CVE-2006-1385
Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in...
Medium 5.1
CVE-2003-0704
KisMAC before 0.05d trusts user-supplied variables when chown'ing files or...
High 7.2
CVE-2002-2242
The Apple Package Manager in KisMAC 0.02a and earlier modifies...
Medium 6.4

Affected Vendor

Affected Software

kismac
Vulnerable Versions:
0.05d

Timeline

Official Publish: September 12th, 2003
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.