Vulnerability in Mandrakesoft Mandrake Linux

CVE-2005-0503

uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.

EPSS: 0.004 (28.6th percentile) — read the EPSS interpretation.

Affected products

Mandrakesoft Mandrake_linux — versions 10.1
Uim — versions 0.4.5
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST)
cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)