CVE-2003-0949
xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program,...
xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.
Exploit likelihood
What each source reports
NVD Score used
xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.
- Record
CVE-2003-0949- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.
- Record
CVE-2003-0949- Updated
- 2026-11-02
EUVDEUVD-2003-0939 No score
xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.
- Record
EUVD-2003-0939- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g97f-h2hx-qjv4 No score
xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program,...
xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.
- Record
GHSA-g97f-h2hx-qjv4- Updated
- 2026-11-02
OSV No score
xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.
- Record
CVE-2003-0949- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0949 No score
xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.
- Record
DEBIAN-CVE-2003-0949- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0949 is a medium vulnerability (CVSS 4.6) in Michael Bischoff Xsok, published December 30, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in xsok 1.02-11.