Unrated severityNVD Advisory· Published Dec 1, 2003· Updated Apr 16, 2026

CVE-2003-0834

Description

Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.

Affected products

SCO Group/Open Unix
cpe:2.3:o:sco:open_unix:8.0:*:*:*:*:*:*:*
SCO Group/Unixware2 versions
cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*
- cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.kb.cert.org/vuls/id/575804nvdPatchThird Party AdvisoryUS Government Resource
www.securityfocus.com/bid/8973nvdPatchVendor Advisory
patches.sgi.com/support/free/security/advisories/20040801-01-Pnvd
archives.neohapsis.com/archives/hp/2003-q4/0047.htmlnvd
sunsolve.sun.com/pub-cgi/retrieve.plnvd
www.idefense.com/application/poi/displaynvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5141nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000