CVE-2003-0449: Medium severity Progress Database vulnerability
Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to gain privileges via (1) a PATH environment variable that points to malicious libraries, as demonstrated using libjutil.so inproapsv, or (2) the -installdir command line parameter, as demonstrated using librocketr.so in dbagent.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Before starting in_proapsv, ensure the PATH environment variable does not contain directories writable by non-privileged users and contains only trusted system directories so dlopen cannot load malicious libraries (mitigates loading of libjutil.so).
in_proapsv PATH environment variable = exclude untrusted or user-writable directories; include only trusted system directories (e.g., /usr/bin:/bin:/usr/local/bin) - Configuration
Launch _dbagent only with a trusted absolute path for -installdir (or omit the parameter) and validate that the path is not user-writable so dlopen cannot load malicious libraries (mitigates loading of librocket_r.so).
_dbagent -installdir command-line parameter = specify a trusted absolute path or do not use a user-controlled path - Compensating control
Restrict ability to modify or execute Progress Database binaries (in_proapsv, _dbagent) and to alter their environment (including PATH) via filesystem permissions, host-level ACLs, or local user restrictions so unprivileged users cannot influence library loading.
- Operational
Search systems for the files libjutil.so and librocket_r.so in directories that may appear in PATH or be supplied via -installdir; if unexpected copies are found, quarantine or remove them and investigate for evidence of local privilege escalation.
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0449?
CVE-2003-0449 has a moderate severity rating due to its potential for privilege escalation.
How do I fix CVE-2003-0449?
To fix CVE-2003-0449, ensure that environment variables and command line parameters aren't exploited to load malicious libraries.
Who is affected by CVE-2003-0449?
CVE-2003-0449 affects users of Progress Database versions 9.1 to 9.1D06.
What types of vulnerabilities are exploited in CVE-2003-0449?
CVE-2003-0449 exploits trust in user input to load libraries via the dlopen function.
Can CVE-2003-0449 be exploited remotely?
CVE-2003-0449 is a local vulnerability that requires local user access to exploit.