CVE-2003-0872
Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other...
CVE-2003-0872 is a low vulnerability (CVSS 2.1) in Sco Openserver, published October 25, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. No source names a fixed version.
- Severity
- 2.1 LowCVSS 2.0, NVD
- Exploit chance
- 0.31%EPSS, 24th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink attack on temporary files.
Exploit likelihood
Affected products
What each source reports
NVD Score used 2.1
Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink attack on temporary files.
- Record
CVE-2003-0872- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE ListNo score
Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink attack on temporary files.
- Record
CVE-2003-0872- Updated
- 2026-11-02
EUVDEUVD-2003-0862No score
Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink attack on temporary files.
- Record
EUVD-2003-0862- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7hx5-52wg-rh87No score
Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other...
Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink attack on temporary files.
- Record
GHSA-7hx5-52wg-rh87- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.