CVE-2003-0449

Progress Database 9.1 to 9.1D06 is affected by an input-trust flaw in library loading via dlopen. Local users can exploit this by placing malicious libraries referenced through PATH or via the -installdir parameter. Affected components include libjutil.so in_proapsv and librocket_r.so in _dbagent...