CVE-2003-0773
- Source
- https://cve.org/CVERecord?id=CVE-2003-0773
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2003-0773.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2003-0773
- Downstream
- Withdrawn
- 2026-01-27T04:05:11.415117Z
- Published
- 2003-09-22T04:00:00Z
- Modified
- 2026-01-27T04:05:11.415117Z
- Summary
- [none]
- Details
-
saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANENETINIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf.
- References
-
- http://www.debian.org/security/2003/dsa-379
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:099
- http://www.novell.com/linux/security/advisories/2003_046_sane.html
- http://www.redhat.com/support/errata/RHSA-2003-278.html
- http://www.securityfocus.com/bid/8595
- ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2004-005.0/CSSA-2004-005.0.txt
- http://www.redhat.com/support/errata/RHSA-2003-285.html
- http://www.securityfocus.com/bid/8593