← Database

CVE-2005-0503

MEDIUM CVSS: 4.6 Published: 2005-02-21 Modified: 2026-06-16

Description

uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.

Affected Platforms

Uim UimMandrakesoft Mandrake Linux

Weakness Type

NVD-CWE-Other

References