{"id":"CVE-2003-0262","aliases":["DEBIAN-CVE-2003-0262","DSA-299","EUVD-2003-0257","GHSA-mj83-j488-mg8j"],"status":"published","title":"leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users...","description":"leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges, which KATAXWR is not designed to have.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00835,"percentile":0.57926,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"published":"2003-05-06T00:00:00Z","modified":"2026-06-16T22:01:51Z","exploits":[{"source":"exploitdb","id":"EDB-22567","title":"Leksbot 1.2 - Multiple Vulnerabilities","type":"local","platform":"linux","date":"2003-05-06","verified":true,"url":"https://www.exploit-db.com/exploits/22567"}],"fixes":[{"ecosystem":"Debian:3.0","package":"leksbot","fixed_in":["1.2-3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:3.0","package":"leksbot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-3.1"}]}]}],"products":[{"vendor":"leksbot","product":"leksbot"}],"references":[{"url":"http://www.securityfocus.com/bid/7505","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11945","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.debian.org/security/2003/dsa-299","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0262"},{"url":"https://github.com/advisories/GHSA-mj83-j488-mg8j"}],"sources":{"cve":[{"id":"CVE-2003-0262","description":"leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges, which KATAXWR is not designed to have.","status":"published","published":"2003-05-08T04:00:00Z","modified":"2024-08-08T01:50:46.855Z","updated_at":"2026-11-02T14:20:16.757505Z"}],"euvd":[{"id":"EUVD-2003-0257","description":"leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges, which KATAXWR is not designed to have.","status":"published","published":"2003-05-08T04:00:00Z","modified":"2024-08-08T01:50:46Z","updated_at":"2026-11-03T01:15:08.178994Z"}],"ghsa":[{"id":"GHSA-mj83-j488-mg8j","title":"leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users...","description":"leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges, which KATAXWR is not designed to have.","status":"published","published":"2022-04-29T01:26:07Z","modified":"2023-01-30T05:01:04Z","updated_at":"2026-11-02T14:46:19.644366Z"}],"nvd":[{"id":"CVE-2003-0262","description":"leksbot 1.2.3 in Debian GNU/Linux installs the KATAXWR as setuid root, which allows local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges, which KATAXWR is not designed to have.","status":"published","published":"2003-05-27T04:00:00Z","modified":"2026-06-16T22:01:51.897Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:46.710758Z"}],"osv":[{"id":"DSA-299","title":"leksbot - improper setuid-root execution","status":"published","published":"2003-05-06T00:00:00Z","modified":"2026-03-09T01:21:09.945692Z","updated_at":"2026-11-02T15:46:15.843838Z"}]}}
