CVE-2003-0937

Published Dec 15, 2003

Last updated 9 months ago

Overview

Description: SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PID) by obtaining a procfs file descriptor for the file and calling execve() on a setuid or setgid program, which leaves the descriptor open to the user.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.6
Impact score: 6.4
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sco:open_unix:8.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D3C9A84A-C2CE-4E50-8CC1-EA0A062AED3A"
          },
          {
            "criteria": "cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "71DDB9D9-AD7B-479D-B128-7150286EE563"
          },
          {
            "criteria": "cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "67E12F60-B4AF-4EF1-A4AA-5E9F0B8B0690"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References