What’s Vulnerable › Vulnerabilities
CVE-2003-0947
- Severity: high (CVSS 7.2 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.3% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2003-12-15 · updated 2026-06-16
- Weakness: CWE-120
Description
Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable.
Affected products
- Wireless Tools Project Wireless Tools: 19, 20, 21, 22, 23, 24 (+2)
References
Get alerted when CVE-2003-0947 or the next vulnerability affects your stack