vulnwire
7.2high

CVE-2002-09871 exploit

X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which co…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.7%
percentile 54%
Public exploits
1
Exploit-DB

X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges.

Exploit prediction (EPSS)

0.71% probability of exploitation in the next 30 days, higher than 54% of all scored CVEs.

Exploits and detections

  • EDB-21758 Caldera X Server 7.1/8.0 - External Program Privileged Invocation · local · 2002-08-27

CVSS scores

Assigned byVersionScoreVector
NVD2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

References

  • osvdb.org /5044 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securityfocus.com /bid/5575 · vdb-entry, x_refsource_BID, x_transferred
  • iss.net /security_center/static/9976.php · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.