CVE-2003-0834
Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.
- Affected products
- Cde Libdthelp Library
- Sco Open Unix
- = 8.0
- Sco Unixware
- = 7.1.1, 7.1.3
- CVSS 2.0
- 7.2 HIGH
- EPSS
- 1.2% (66th percentile)
- NVD status
- Modified
- Published
- 2003-11-06
CVE-2003-0834 at NVD
14 known exploits for CVE-2003-0834
Proof-of-concept code and exploit modules indexed by Sploitus
exploits
Solaris 7/8/9 CDE libDtHelp - Buffer Overflow Non-Exec Stack Privilege Escalation Exploit
Solaris 7/8/9 CDE libDtHelp - Buffer Overflow dtprintinfo Privilege Escalation Exploit
Solaris 7/8/9 CDE LibDTHelp - Local Buffer Overflow Exploit (2)
Solaris 7/8/9 CDE LibDTHelp Local Buffer Overflow Exploit
Solaris 7/8/9 CDE LibDTHelp Local Buffer Overflow Exploit (2)
Solaris 7/8/9 CDE LibDTHelp Local Buffer Overflow Exploit
Solaris 7/8/9 CDE LibDTHelp Local Buffer Overflow Exploit (2)
Solaris 789 CDE LibDTHelp - Local Buffer Overflow (1)
Solaris 789 CDE LibDTHelp - Local Buffer Overflow (2)
Solaris 7/8/9 CDE LibDTHelp - Local Buffer Overflow (2)
Solaris 7/8/9 CDE LibDTHelp - Local Buffer Overflow (1)
Solaris 7/8/9 CDE libDtHelp - Buffer Overflow Non-Exec Stack Privilege Escalation
Solaris 7/8/9 CDE libDtHelp - Buffer Overflow dtprintinfo Privilege Escalation