Every CVE Search/ Get API key

CVE-2003-0188

lv reads a .lv file from the current working directory, which allows local users to execute...

7.2 HighFix available

lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.

Exploit likelihood

0.44%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.

Record
CVE-2003-0188
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.

Record
CVE-2003-0188
Updated
2026-11-02
EUVDEUVD-2003-0184 No score

lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.

Record
EUVD-2003-0184
Updated
2026-11-03
GitHub AdvisoriesGHSA-mpj5-8r3q-68mq No score

lv reads a .lv file from the current working directory, which allows local users to execute...

lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.

Record
GHSA-mpj5-8r3q-68mq
Updated
2026-11-02
OSV No score

lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.

Record
CVE-2003-0188
Updated
2026-11-02
OSVDEBIAN-CVE-2003-0188 No score

lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.

Record
DEBIAN-CVE-2003-0188
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
lv
Debian:12
before 4.49.5-2
4.49.5-2
lv
Debian:13
before 4.49.5-2
4.49.5-2
lv
Debian:14
before 4.49.5-2
4.49.5-2
lv
Debian:3.0
before 4.49.4-7woody2
4.49.4-7woody2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-0188 is a high vulnerability (CVSS 7.2) in Lv, published May 15, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in lv 4.49.5-2.

References

MoveEnter Open