CVE-2003-0742 in SCO OpenServer
Summary
SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to run as if it were called from ncsa_httpd, then modifying the PATH environment variable to point to a malicious "hostname" program.
Reservation
09/03/2003
Disclosure
10/06/2003
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 20852 | SCO OpenServer privileges management | 269 | Not defined | Not defined | CVE-2003-0742 |