Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

UnixWare 7.1.1 local users can gain extra privileges

CVE-2002-0246 · published 24 years ago
Summary

On systems running UnixWare version 7.1.1, a flaw in how the system reads message files can be triggered by changing the LC_MESSAGE setting. By doing this, a regular user can trick privileged programs into executing code with higher rights, effectively gaining additional access. Apply the vendor's patch or update to a fixed version as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
caldera unixware 7.1.1
cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*
Original advisory text
Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE environment variable to read other message c...
Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE environment variable to read other message catalogs containing format strings from setuid programs such as vxprint.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.2 High
Exploitation
<1% chance of attack within 30 days
Timeline
Published29 May 2002
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2002-0246 · NVD
Track software like this
Free during beta