VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 15, 2003· Updated Jun 16, 2026

CVE-2003-0937

CVE-2003-0937

Description

SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PID) by obtaining a procfs file descriptor for the file and calling execve() on a setuid or setgid program, which leaves the descriptor open to the user.

Affected products

5
  • SCO Group/Open Unix2 versions
    cpe:2.3:o:sco:open_unix:8.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:sco:open_unix:8.0:*:*:*:*:*:*:*
    • (no CPE)range: 8.0.0
  • SCO Group/Unixware3 versions
    cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*
    • cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*
    • (no CPE)range: 7.1.1, 7.1.3

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.