CVE-2003-0580 Memory corruption in n/a

High 7.2 Published Updated

A local high-privilege user can execute arbitrary code via a buffer overflow in the uvadmsh utility of IBM U2 UniVerse.

Exploited in the wild
Not known
Login needed
An administrator
Attackable
Local or same network only
Victim action needed
Not needed
Fix
None listed

What is CVE-2003-0580?

CVE-2003-0580 is a high-severity memory corruption vulnerability in n/a, published on 17 Jul 2003. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument.

Which versions are affected by CVE-2003-0580?

It affects 1 product.

Products include Ibm U2 Universe.

How do I fix CVE-2003-0580?

No fix has been published for CVE-2003-0580 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2003-0580 being exploited?

There is no known exploitation of CVE-2003-0580 in the wild and no public exploit code.

Sources

Also known as GHSA-fgfp-qv4x-7q38.

Is CVE-2003-0580 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free