CVE-2003-1379
ClarkConnect Linux 1.2 - Unauthenticated Sensitive Information Exposure via clarkconnectd Commands
Title source: llmDescription
clarkconnectd in ClarkConnect Linux 1.2 allows remote attackers to obtain sensitive information about the server via the characters (1) A, which reveals the date and time, (2) F, (3) M, which reveals 'ifconfig' information, (4) P, which lists the processes, (5) Y, which reveals the snort log files, or (6) b, which reveals /var/log/messages.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/11419
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/313080
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/6934
Scores
EPSS
0.0189
EPSS Percentile
77.2%
Details
CWE
CWE-200
Status
published
Products (1)
point_clark_networks/clarkconnect
1.2
Published
Dec 31, 2003
Tracked Since
Feb 18, 2026