saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANE_NET_INIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2003-09-21 21:00
Updated : 2013-08-22 21:29
NVD link : CVE-2003-0773
Mitre link : CVE-2003-0773
JSON object : View
CWE
Products Affected
sane
- sane-backend
- sane