CVE-2003-0947

CVE-2003-0947 describes a buffer overflow vulnerability in the iwconfig utility, part of the wireless_tools project. When iwconfig is installed with setuid permissions, a local attacker can exploit this flaw by providing an overly long OUT environment variable, leading to arbitrary code execution. This vulnerability carries a high CVSS score of 7.2, indicating critical impact with local access, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, multiple exploit proofs-of-concept are publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.