CVE-2003-0102
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute...
CVE-2003-0102 is a medium vulnerability (CVSS 4.6) in File, published March 13, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.98%, the 80th percentile. Fixed in file 3.40-1.1.
- Severity
- 4.6 MediumCVSS 2.0, NVD
- Exploit chance
- 1.98%EPSS, 80th percentile
- Exploitation
- None known2 public exploits
- Fixed in
3.40-1.1file +3 more
Description
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
Exploit likelihood
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | File 3.x - Local Stack Overflow Code Execution (1) | 2003-03-04 |
| Exploit-DB | File 3.x - Local Stack Overflow Code Execution (2) | 2003-03-04 |
What each source reports
NVD Score used
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
- Record
CVE-2003-0102- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
- Record
CVE-2003-0102- Updated
- 2026-11-02
EUVDEUVD-2003-0098No score
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
- Record
EUVD-2003-0098- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8hj3-wvpv-xrprNo score
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute...
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
- Record
GHSA-8hj3-wvpv-xrpr- Updated
- 2026-11-02
OSVNo score
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
- Record
CVE-2003-0102- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0102No score
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
- Record
DEBIAN-CVE-2003-0102- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
idefense.com/advisory/03.04.03.txt
exchange.xforce.ibmcloud.com/vulnerabilities/11469
redhat.com/support/errata/RHSA-2003-087.html
novell.com/linux/security/advisories/2003_017_file.html
securityfocus.com/bid/7008
marc.info?l=bugtraq&m=104680706201721&w=2
Show 8 moreShow less
lwn.net/Alerts/34908
debian.org/security/2003/dsa-260
kb.cert.org/vuls/id/611865
mandrakesoft.com/security/advisories?name=MDKSA-2003:030
nvd.nist.gov/vuln/detail/CVE-2003-0102
github.com/advisories/GHSA-8hj3-wvpv-xrpr
security-tracker.debian.org/tracker/CVE-2003-0102