EUVD-2005-3149

Malware in sbrugna...

CVE-2005-3149

Uim 0.4.x before 0.4.9.1 and 0.5.0 and earlier does not properly handle the LIBUIMVANILLA environment variable when a suid or sgid application is linked to libuim, such as immodule for Qt, which allows local users to gain privileges...

CVE-2005-3149

CVE-2005-3149 affects uim, specifically 0.4.x (before 0.4.9.1) and 0.5.0 and earlier, where LIBUIM_VANILLA is not handled correctly when linked into suid/sgid apps (e.g., immodule for Qt), enabling local privilege escalation. Public advisories from Debian (DSA-895-1), Gentoo GLSA 200510-03, Mandr...