PT-2003-1835 · Sco · Sco Internet Manager

CVE-2003-0742 · Publicado 2003-09-19 · Atualizado 2022-08-17

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: SCO Internet Manager (mana) (affected versions not specified)

Description: The issue allows local users to execute arbitrary programs. This is achieved by setting the REMOTE ADDR environment variable to make menu.mana run as if it were called from ncsa httpd, and then modifying the PATH environment variable to point to a malicious hostname program.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2003-0742

Produtos afetados

Sco Internet Manager

Referências · 2

• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2003-0742 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0742 · Nota de Segurança