CVE-2003-0703: Undefined Security Weakness

KisMAC before 0.05d trusts user-supplied variables to load arbitrary kernels or kernel modules, which allows local users to gain privileges via the $DRIVERKEXT environment variable as used in 1 vihadriver.sh, 2 macjackload.sh, or 3 airojackload.sh, or 4 via "similar techniques" using...

CVE-2003-0704: Undefined Security Weakness

KisMAC before 0.05d trusts user-supplied variables when chown'ing files or directories, which allows local users to gain privileges via the $DRIVERKEXT environment variable in 1 vihadriver.sh, 2 macjackload.sh, 3 airojackload.sh, 4 setuidenable.sh, 5 setuiddisable.sh, and using a "similar...