CVE-2003-0704 - CVE House
Back to Database
Status published High CVE-2003-0704

KisMAC before 0.05d trusts user-supplied variables when chown'ing files or...

Vulnerability Description

KisMAC before 0.05d trusts user-supplied variables when chown'ing files or directories, which allows local users to gain privileges via the $DRIVER_KEXT environment variable in (1) viha_driver.sh, (2) macjack_load.sh, (3) airojack_load.sh, (4) setuid_enable.sh, (5) setuid_disable.sh, and using a "similar technique" for (6) viha_prep.sh and (7) viha_unprep.sh.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2003-0704

Credits & Attribution

No credits recorded in the NVD database.

References

More from kismac

View All →
CVE-2006-1385
Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in...
Medium 5.1
CVE-2003-0703
KisMAC before 0.05d trusts user-supplied variables to load arbitrary kernels...
High 7.2
CVE-2002-2242
The Apple Package Manager in KisMAC 0.02a and earlier modifies...
Medium 6.4

Affected Vendor

Affected Software

kismac
Vulnerable Versions:
0.05d

Timeline

Official Publish: September 12th, 2003
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.