PublicDate: 2005-02-21 05:00:00 UTC Candidate: CVE-2005-0503 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0503 Description: uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_uim: released (1.0.0-1ubuntu1) edgy_uim: released (1.0.0-1ubuntu1) feisty_uim: released (1.0.0-1ubuntu1) devel_uim: released (1.0.0-1ubuntu1) dapper_mlterm: released (2.9.2-6ubuntu1) edgy_mlterm: released (2.9.2-6ubuntu1) feisty_mlterm: released (2.9.2-6ubuntu1) devel_mlterm: released (2.9.2-6ubuntu1) upstream_mlterm: needs-triage upstream_uim: needs-triage