uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.
CVSS Score
4.6
EPSS Score
0.001
Published
2005-02-21