|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200502-31] uim: Privilege escalation vulnerability Vulnerability Scan
Vulnerability Scan Summary
uim: Privilege escalation vulnerability
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200502-31
(uim: Privilege escalation vulnerability)
Takumi Asaki discovered that uim insufficiently checks environment
variables. setuid/setgid applications linked against libuim could end
up executing arbitrary code. This vulnerability only affects
immodule-enabled Qt (if you build Qt 3.3.2 or later versions with
USE="immqt" or USE="immqt-bc").
Impact
A malicious local user could exploit this vulnerability to execute
arbitrary code with escalated rights.
Workaround
There is no known workaround at this time.
References:
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0503
http://lists.freedesktop.org/archives/uim/2005-February/000996.html
Solution:
All uim users should upgrade to the latest available version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-i18n/uim-0.4.5.1"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
