CVE-2003-0396

CVE-2003-0396 describes a buffer overflow vulnerability in the les utility within the linux-atm package, affecting versions prior to 2.4.1. If les is configured to run with setuid permissions, a local attacker can exploit this flaw by providing an excessively long -f command line argument, potentially leading to privilege escalation. This vulnerability has a CVSS score of 4.6, indicating a medium severity with local access, low attack complexity, and partial impact on confidentiality, integrity, and availability. While there is an ExploitDB entry (EDB-22540) detailing a proof-of-concept, there is no evidence of active exploitation, Metasploit modules, or significant community discussion surrounding this CVE.