high7.2Public exploit code
CVE-2002-0246
Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE enviro…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Caldera UnixWare 7.1.1 - Message Catalog Environment Variable Format String2002-02-07 · local · unixware · Verified
Impact
Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE environment variable to read other message catalogs containing format strings from setuid programs such as vxprint.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Caldera | Unixware | Version 7.1.1 |