CVE-2002-0987 X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges.
HighCVSS 7.2
EPSS 0.71%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| caldera unixware | = 7.1.1 | No fix listed |
| caldera openunix | = 8.0 | No fix listed |
References
- openunix-unixware-xsco-privileges(9976) vdb-entry
- 5044 vdb-entry
- 5575 vdb-entry