1. Home
  2. CVE Database
  3. CVE-2017-1000203
HIGH · 8.8

CVE-2017-1000203

ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in the rootd daemon resulting in remote code execution

Vulnerability Description

ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in the rootd daemon resulting in remote code execution

CVSS Score

8.8

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CernRoot<= 6.9.03

Related Weaknesses (CWE)

CWE-78

References

FAQ

What is CVE-2017-1000203?

CVE-2017-1000203 is a vulnerability with a CVSS score of 8.8 (HIGH). ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in the rootd daemon resulting in remote code execution

How severe is CVE-2017-1000203?

CVE-2017-1000203 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-1000203?

Check the references section above for vendor advisories and patch information. Affected products include: Cern Root.