CVE-2005-0503

Опубликовано: 21 фев. 2005

Источник: nvd

CVSS2: 4.6

EPSS Низкий

Описание

uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.

Ссылки

http://lists.freedesktop.org/archives/uim/2005-February/000996.html
Vendor Advisory
http://secunia.com/advisories/13981
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:046
http://www.securityfocus.com/bid/12604
Patch
Vendor Advisory
http://lists.freedesktop.org/archives/uim/2005-February/000996.html
Vendor Advisory
http://secunia.com/advisories/13981
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:046
http://www.securityfocus.com/bid/12604
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:uim:uim:0.4.5:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*

EPSS

Процентиль: 21%

0.00068

Низкий

4.6 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-0503

ubuntu

больше 20 лет назад

uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.

CVE-2005-0503

debian

больше 20 лет назад

uim before 0.4.5.1 trusts certain environment variables when libUIM is ...

GHSA-p5v6-j4pp-pf2r

github

больше 3 лет назад

uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.

EPSS

Процентиль: 21%

0.00068

Низкий

4.6 Medium

CVSS2

Дефекты

NVD-CWE-Other