Lucene search
HistoryOct 06, 2003 - 4:00 a.m.
CVE-2003-0742
cve-2003-0742
sco internet manager
mana
local users
arbitrary programs
remote code execution
7.2 High
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to run as if it were called from ncsa_httpd, then modifying the PATH environment variable to point to a malicious “hostname” program.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sco:openserver | sco openserver | eq | 5.0.7 |
| sco:openserver | sco openserver | eq | 5.0.5 |
| sco:openserver | sco openserver | eq | 5.0.6 |
Related
securityvulns
securityvulns
7.2 High
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
Related for CVE-2003-0742