Every CVESearch/Get API key

CVE-2003-0205

gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary...

7.5 High

gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI.

Exploit likelihood

1.92%Up 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used7.5

gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI.

Record
CVE-2003-0205
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI.

Record
CVE-2003-0205
Updated
2026-11-02
EUVDEUVD-2003-0200No score

gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI.

Record
EUVD-2003-0200
Updated
2026-11-03
GitHub AdvisoriesGHSA-7w8r-cfvh-4pcfNo score

gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary...

gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI.

Record
GHSA-7w8r-cfvh-4pcf
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gkrellm-newsticker
Debian:3.0
From an advisory covering 2 CVEs
before 0.3-3.1
0.3-3.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-0205 is a high vulnerability (CVSS 7.5) in Gkrellm Newsticker Newsticker, published April 23, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.92%, the 80th percentile. No source names a fixed version.

References

MoveEnter Open