CVE-2003-0188
lv reads a .lv file from the current working directory, which allows local users to execute...
lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.
Exploit likelihood
What each source reports
NVD Score used
7.2
lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.
- Record
CVE-2003-0188- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.
- Record
CVE-2003-0188- Updated
- 2026-11-02
EUVDEUVD-2003-0184 No score
lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.
- Record
EUVD-2003-0184- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mpj5-8r3q-68mq No score
lv reads a .lv file from the current working directory, which allows local users to execute...
lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.
- Record
GHSA-mpj5-8r3q-68mq- Updated
- 2026-11-02
OSV No score
lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.
- Record
CVE-2003-0188- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0188 No score
lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.
- Record
DEBIAN-CVE-2003-0188- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0188 is a high vulnerability (CVSS 7.2) in Lv, published May 15, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in lv 4.49.5-2.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A430
redhat.com/support/errata/RHSA-2003-169.html
debian.org/security/2003/dsa-304
redhat.com/support/errata/RHSA-2003-167.html
turbolinux.com/security/TLSA-2003-35.txt
nvd.nist.gov/vuln/detail/CVE-2003-0188
github.com/advisories/GHSA-mpj5-8r3q-68mq
security-tracker.debian.org/tracker/CVE-2003-0188