CVE-2003-0937: Medium severity SCO Open UNIX vulnerability
SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PID) by obtaining a procfs file descriptor for the file and calling execve() on a setuid or setgid program, which leaves the descriptor open to the user.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0937?
CVE-2003-0937 has been classified as a medium severity vulnerability.
How do I fix CVE-2003-0937?
To fix CVE-2003-0937, upgrade to the latest versions of SCO UnixWare or Open UNIX that do not contain this vulnerability.
Who is affected by CVE-2003-0937?
CVE-2003-0937 affects local users on SCO UnixWare versions 7.1.1, 7.1.3, and Open UNIX 8.0.0.
What is the nature of the vulnerability in CVE-2003-0937?
CVE-2003-0937 allows local users to bypass protections for the 'as' address space file by using procfs.
Can CVE-2003-0937 be exploited remotely?
CVE-2003-0937 cannot be exploited remotely; it requires local access to the system.