CVE-2003-0449

MEDIUM 4.6CVE-2003-0449 · Published 07/08/2003 · updated 16/06/2026

In short

CVE-2003-0449 is a MEDIUM (CVSS 4.6) vulnerability affecting database (progress).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
database progress	`= 9.1`	No fix yet

Description

Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to gain privileges via (1) a PATH environment variable that points to malicious libraries, as demonstrated using libjutil.so in_proapsv, or (2) the -installdir command line parameter, as demonstrated using librocket_r.so in _dbagent.

References

marc.info
marc.info
secnetops.com/research/advisories/SRT2003-06-13-0945.txt · Exploit
secnetops.com/research/advisories/SRT2003-06-13-1009.txt · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free