CVE-2003-0949

xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.

Date published : 2004-01-14

http://www.securityfocus.com/bid/9321

http://www.debian.org/security/2003/dsa-405