Security Advisory

CVE-2003-0579

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2003-07-17 04:00:00
Last updated 2024-08-08 01:58:11
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier trusts the user-supplied -uv.install command line option to find and execute the uv.install program, which allows local users to gain privileges by providing a pathname that is under control of the user.