CVE-2005-3149

MEDIUM 4.6CVE-2005-3149 · Published 05/10/2005 · updated 16/06/2026

In short

CVE-2005-3149 is a MEDIUM (CVSS 4.6) vulnerability affecting uim (uim).
Chance of exploitation in the next 30 days (EPSS): 0.41%, higher than 35.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
uim uim	`≤ 0.5.0`	No fix yet

Description

Uim 0.4.x before 0.4.9.1 and 0.5.0 and earlier does not properly handle the LIBUIM_VANILLA environment variable when a suid or sgid application is linked to libuim, such as immodule for Qt, which allows local users to gain privileges.

References

bugs.debian.org/cgi-bin/bugreport.cgi · Patch
lists.freedesktop.org/pipermail/uim/2005-September/001346.html · Patch
lists.freedesktop.org/pipermail/uim/2005-September/001347.html · Patch
secunia.com/advisories/17043 · Patch
secunia.com/advisories/17058
secunia.com/advisories/17572
securitytracker.com/id
debian.org/security/2005/dsa-895
gentoo.org/security/en/glsa/glsa-200510-03.xml · Patch
securityfocus.com/bid/15007
vupen.com/english/advisories/2005/1946
vupen.com/english/advisories/2005/1947

More vulnerabilities in uim

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free