exploitDog

GHSA-p5v6-j4pp-pf2r

Опубликовано: 01 мая 2022

Источник: github

Github: Не прошло ревью

Описание

uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.

uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2005-0503
http://lists.freedesktop.org/archives/uim/2005-February/000996.html
http://secunia.com/advisories/13981
http://www.mandriva.com/security/advisories?name=MDKSA-2005:046
http://www.securityfocus.com/bid/12604

EPSS

Процентиль: 28%

0.0036

Низкий

CVE ID

Связанные уязвимости

CVE-2005-0503

ubuntu

больше 21 года назад

uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.

CVE-2005-0503

nvd

больше 21 года назад

uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.

CVE-2005-0503

debian

больше 21 года назад

uim before 0.4.5.1 trusts certain environment variables when libUIM is ...

EPSS

Процентиль: 28%

0.0036

Низкий

CVE ID