CVE-2003-0579

uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and execute the uv.install program, which allows local users to gain privileges by providing a pathname that is under control of the user...

CVE-2003-0579

CVE-2003-0579 affects IBM U2 UniVerse before or at version 10.0.0.9, where uvadmsh trusts a user-supplied -uv.install command line option to locate and run uv.install. The flaw lets a local attacker cause execution of uv.install by supplying a pathname under the attacker’s control, enabling privi...