CVE-2003-0742

SCO Internet Manager mana allows local users to execute arbitrary programs by setting the REMOTEADDR environment variable to cause menu.mana to run as if it were called from ncsahttpd, then modifying the PATH environment variable to point to a malicious "hostname" program...

CVE-2003-0742

CVE-2003-0742 affects SCO Internet Manager (mana). Local users can trigger menu.mana to run in the context of ncsa_httpd by exporting REMOTE_ADDR and then modify PATH to point to a malicious hostname program, enabling arbitrary program execution with root privileges on OpenServer 5.0.5–5.0.7. The...