CVE-2003-0449 Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to gain privileges via (1) a PATH environment variable that points to malicious libr...
MediumCVSS 4.6
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to gain privileges via (1) a PATH environment variable that points to malicious libraries, as demonstrated using libjutil.so in_proapsv, or (2) the -installdir command line parameter, as demonstrated using librocket_r.so in _dbagent.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| progress database | = 9.1 | No fix listed |
References
- 20030614 SRT2003-06-13-0945 - Progress PATH based dlopen() issue mailing-list
- 20030614 SRT2003-06-13-1009 - Progress _dbagent -installdir dlopen() issue mailing-list
- www.secnetops.com exploit patch vendor-advisory
- www.secnetops.com exploit patch vendor-advisory