CVE-2003-0579 uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and execute the uv.install program, which allows local users to gain privileges by prov...
MediumCVSS 4.6
EPSS 0.88%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and execute the uv.install program, which allows local users to gain privileges by providing a pathname that is under control of the user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm u2 universe | <= 10.0.0.9 | No fix listed |
References
- 20030716 SRT2003-07-07-0833 - IBM U2 UniVerse users with uvadm rights can take root via uvadmsh exploit mailing-list vendor-advisory
- 20030716 SRT2003-07-07-0833 - IBM U2 UniVerse users with uvadm rights can take root via uvadmsh mailing-list