← Database

CVE-2003-0949

MEDIUM CVSS: 4.6 Published: 2004-02-03 Modified: 2026-06-16

Description

xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.

Affected Platforms

Michael Bischoff Xsok

Weakness Type

NVD-CWE-Other

References