medium4.6
CVE-2003-0949
xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.
Impact
xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Michael Bischoff | Xsok | Version 1.02 |
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2003/dsa-405
- http://www.securityfocus.com/bid/9321
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14098
- http://www.debian.org/security/2003/dsa-405
- http://www.securityfocus.com/bid/9321
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14098