VulnerabilityModified
CVE-2002-0987
X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges.
HIGH 7.2EPSS 0.71%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.71%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 0.71% probability · 51th percentile
- CISA KEV
- Not listed
- Affected
- caldera/unixware · caldera/openunix
- Source
- cve@mitre.org
References
- ftp://ftp.sco.com/pub/updates/OpenUNIX/CSSA-2002-SCO.38
- http://www.iss.net/security_center/static/9976.php
- http://www.osvdb.org/5044
- http://www.securityfocus.com/bid/5575
- ftp://ftp.sco.com/pub/updates/OpenUNIX/CSSA-2002-SCO.38
- http://www.iss.net/security_center/static/9976.php
- http://www.osvdb.org/5044
- http://www.securityfocus.com/bid/5575
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.