CVE-2003-1128 - Vulnerability Details - OpenCVE

XMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7, 2003, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to TCP port 8086.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
X2 Studios	Xmms Remote

Configuration 1 [-]

cpe:2.3:a:x2_studios:xmms_remote:0.1:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://secunia.com/advisories/8775
http://www.kb.cert.org/vuls/id/583020
http://www.securityfocus.com/bid/7534
http://www.x2studios.com/index.php?page=kb&id=16
https://exchange.xforce.ibmcloud.com/vulnerabilities/12139

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-03-12T05:00:00

Updated: 2024-08-08T02:19:44.762Z

Reserved: 2005-03-12T00:00:00

Link: CVE-2003-1128

Vulnrichment

No data.

NVD

Status : Modified

Published: 2003-12-31T05:00:00.000

Modified: 2024-11-20T23:46:25.190

Link: CVE-2003-1128

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2003-05-07T00:00:00", "descriptions": [{"lang": "en", "value": "XMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7, 2003, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to TCP port 8086."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "8775", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/8775"}, {"name": "VU#583020", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "http://www.kb.cert.org/vuls/id/583020"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.x2studios.com/index.php?page=kb&id=16"}, {"name": "7534", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/7534"}, {"name": "xmms-remote-command-execution(12139)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/12139"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2003-1128", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "XMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7, 2003, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to TCP port 8086."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "8775", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/8775"}, {"name": "VU#583020", "refsource": "CERT-VN", "url": "http://www.kb.cert.org/vuls/id/583020"}, {"name": "http://www.x2studios.com/index.php?page=kb&id=16", "refsource": "CONFIRM", "url": "http://www.x2studios.com/index.php?page=kb&id=16"}, {"name": "7534", "refsource": "BID", "url": "http://www.securityfocus.com/bid/7534"}, {"name": "xmms-remote-command-execution(12139)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/12139"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T02:19:44.762Z"}, "title": "CVE Program Container", "references": [{"name": "8775", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/8775"}, {"name": "VU#583020", "tags": ["third-party-advisory", "x_refsource_CERT-VN", "x_transferred"], "url": "http://www.kb.cert.org/vuls/id/583020"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.x2studios.com/index.php?page=kb&id=16"}, {"name": "7534", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/7534"}, {"name": "xmms-remote-command-execution(12139)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/12139"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2003-1128", "datePublished": "2005-03-12T05:00:00", "dateReserved": "2005-03-12T00:00:00", "dateUpdated": "2024-08-08T02:19:44.762Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:x2_studios:xmms_remote:0.1:*:*:*:*:*:*:*", "matchCriteriaId": "B6E626CC-A16D-4D71-B74D-6555C9ABE454", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "XMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7, 2003, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to TCP port 8086."}], "id": "CVE-2003-1128", "lastModified": "2024-11-20T23:46:25.190", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2003-12-31T05:00:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Patch"], "url": "http://secunia.com/advisories/8775"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Patch", "Third Party Advisory", "US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/583020"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/7534"}, {"source": "cve@mitre.org", "url": "http://www.x2studios.com/index.php?page=kb&id=16"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/12139"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch"], "url": "http://secunia.com/advisories/8775"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch", "Third Party Advisory", "US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/583020"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/7534"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.x2studios.com/index.php?page=kb&id=16"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/12139"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}