Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2005-0503
HistoryFeb 21, 2005 - 5:00 a.m.

CVE-2005-0503

2005-02-2105:00:00
Debian Security Bug Tracker
security-tracker.debian.org
7

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0

Percentile

5.1%

uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.

OSVersionArchitecturePackageVersionFilename
Debian12alluim< 1:0.4.6beta2-1uim_1:0.4.6beta2-1_all.deb
Debian11alluim< 1:0.4.6beta2-1uim_1:0.4.6beta2-1_all.deb
Debian999alluim< 1:0.4.6beta2-1uim_1:0.4.6beta2-1_all.deb
Debian13alluim< 1:0.4.6beta2-1uim_1:0.4.6beta2-1_all.deb

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0

Percentile

5.1%