VULNERABILITY INTELLIGENCE

CVE-2003-0578

CVSS score7.8 HIGH
EPSS probability0.46%
CISA KEVNot currently listed
Published2003-08-18
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users to gain privileges by deleting and overwriting arbitrary files.

Weakness classification

  • CWE-59: Improper Link Resolution Before File Access ('Link Following')

Primary references