CVE-2005-0503: Medium severity uim Uim vulnerability
Published Feb 21, 2005
·Updated
uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.
Affected Software
3 affected components
uim Uim=0.4.5
Mandrakesoft Mandrake Linux=10.1
Mandrakesoft Mandrake Linux=10.1
Remediation
Patch Available
Patch Available
Event History
Feb 21, 2005
CVE Published
05:00 AM
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0503?
CVE-2005-0503 is categorized as a high-severity vulnerability due to its potential to allow local users to escalate privileges.
2
How do I fix CVE-2005-0503?
To mitigate CVE-2005-0503, upgrade to UIM version 0.4.5.1 or later, which addresses the privilege escalation issue.
3
What type of applications are affected by CVE-2005-0503?
CVE-2005-0503 affects setuid and setgid applications that use libUIM.
4
Who is impacted by CVE-2005-0503?
Local users on systems using vulnerable versions of UIM are impacted by CVE-2005-0503.
5
Is CVE-2005-0503 specific to any operating systems?
CVE-2005-0503 primarily affects Mandrake Linux 10.1 and any installations of UIM before version 0.4.5.1.