Buffer overflow in Wireless Tools Project

CVE-2003-0947

Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable.

Vulnerability class: Buffer Overflow

EPSS: 0.013 (67.5th percentile) — read the EPSS interpretation.

Affected products

Wireless_tools_project Wireless_tools — versions 19, 20, 21
N/a — versions n/a

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ, Mailing List, Third Party Advisory)