Security Advisory
CVE-2003-0949
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.