CVE-2005-0503

MEDIUM 4.6CVE-2005-0503 · Published 21/02/2005 · updated 16/06/2026

In short

CVE-2005-0503 is a MEDIUM (CVSS 4.6) vulnerability affecting uim (uim).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 29.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
uim uim	`= 0.4.5`	No fix yet

Description

uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.

References

lists.freedesktop.org/archives/uim/2005-February/000996.html · Vendor Advisory
secunia.com/advisories/13981 · Patch
mandriva.com/security/advisories
securityfocus.com/bid/12604 · Patch

More vulnerabilities in uim

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free