CVE-2003-0262 Privilege escalation in n/a
Local attackers can gain root privileges by exploiting vulnerabilities in the setuid root KATAXWR binary within leksbot.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2003-0262?
CVE-2003-0262 is a high-severity vulnerability in n/a, published on 8 May 2003. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges, which KATAXWR is not designed to have.
Which versions are affected by CVE-2003-0262?
It affects 1 product.
Products include Leksbot Leksbot.
How do I fix CVE-2003-0262?
Apply the vendor's patch.
Is CVE-2003-0262 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2003-0262 exists.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as DSA-299, GHSA-mj83-j488-mg8j.