CVE-2003-0949

Medium

4.6/10

Summary

xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.

Access Complexity: LOW
AccessVector: LOCAL
Authentication: NONE
Integrity Impact: PARTIAL
Confidentiality Impact: PARTIAL
Availability Impact: PARTIAL

References

Advisory Timeline

Published Feb 03, 2004

CVE-2003-0949

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS