What’s Vulnerable › Vulnerabilities

CVE-2003-0937

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2003-12-15 · updated 2026-06-16

Description

SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PID) by obtaining a procfs file descriptor for the file and calling execve() on a setuid or setgid program, which leaves the descriptor open to the user.

Affected products

• Sco Open Unix: 8.0
• Sco Unixware: 7.1.1, 7.1.3

References

• http://marc.info/?l=bugtraq&m=106865297403687&w=2
• http://www.texonet.com/advisories/TEXONET-20031024.txt
• http://marc.info/?l=bugtraq&m=106865297403687&w=2
• http://www.texonet.com/advisories/TEXONET-20031024.txt

Get alerted when CVE-2003-0937 or the next vulnerability affects your stack