CVE-2003-0742: High severity SCO OpenServer vulnerability
SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTEADDR environment variable to cause menu.mana to run as if it were called from ncsahttpd, then modifying the PATH environment variable to point to a malicious "hostname" program.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0742?
CVE-2003-0742 has a moderate severity rating due to local users' ability to execute arbitrary programs.
How do I fix CVE-2003-0742?
To fix CVE-2003-0742, ensure that proper access controls are in place and the environment variables are correctly set to prevent exploitation.
Who is affected by CVE-2003-0742?
CVE-2003-0742 affects local users on SCO OpenServer versions 5.0.5, 5.0.6, and 5.0.7.
What kind of vulnerability is CVE-2003-0742?
CVE-2003-0742 is a local privilege escalation vulnerability that allows unauthorized execution of commands.
Can CVE-2003-0742 be used to exploit other systems?
CVE-2003-0742 is primarily a local vulnerability and does not have direct implications for remote system exploitation.