TI-2003-00848 Aliases CVE-2003-0937 GHSA-hcmv-4364-jhrx

SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections…

LOW 21Published 2003-11-18 · Updated 2024-08-08

Key facts

Attack vector: Local
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: Partial · Partial · Partial
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PID) by obtaining a procfs file descriptor for the file and calling execve() on a setuid or setgid program, which leaves the descriptor open to the user.

Why it matters now

EPSS 0.00374 31st percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:o:sco:open_unix:8.0:::::::*	8.0	Vulnerable	Sco
cpe:2.3:o:sco:unixware:7.1.1:::::::*	7.1.1	Vulnerable	Sco
cpe:2.3:o:sco:unixware:7.1.3:::::::*	7.1.3	Vulnerable	Sco

cpe:2.3:o:sco:open_unix:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Sco
cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:* Versions 7.1.1 Vulnerable ·Sco
cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:* Versions 7.1.3 Vulnerable ·Sco

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2003-0937
2026-10-03 Alias added: GHSA-hcmv-4364-jhrx

References

Patch 1

http://www.texonet.com/advisories/TEXONET-20031024.txt

Other 1

20031112 Insecure handling of procfs descriptors in UnixWare can lead to local privilege escalation.

TI-2002-01917 Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote… CVSS 2.0HIGH 7.5
TI-2003-00769 Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via… CVSS 2.0HIGH 7.2
TI-2001-01527 The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate… CVSS 2.0MEDIUM 5.0
TI-2002-01257 Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to… CVSS 2.0MEDIUM 4.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences