CVE-2003-1379

clarkconnectd in ClarkConnect Linux 1.2 allows remote attackers to obtain sensitive information about the server via the characters (1) A, which reveals the date and time, (2) F, (3) M, which reveals 'ifconfig' information, (4) P, which lists the processes, (5) Y, which reveals the snort log files, or (6) b, which reveals /var/log/messages.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2003-12-31

Last modified

2024-08-08

Weaknesses

CWE-200

Affected products

• Clarkconnect (Point Clark Networks)

References

• http://www.securityfocus.com/archive/1/313080
• http://www.securityfocus.com/bid/6934
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11419