high7.2Public exploit code
CVE-2002-0987
X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local user…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Caldera X Server 7.1/8.0 - External Program Privileged Invocation2002-08-27 · local · unix · Verified
Impact
X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Caldera | Unixware | Version 7.1.1 |
| Caldera | Openunix | Version 8.0 |