{"id":"CVE-2003-0949","details":"xsok 1.02 does not properly drop privileges before finding and executing the \"gunzip\" program, which allows local users to execute arbitrary commands.","modified":"2026-04-10T03:36:18.604666Z","published":"2004-02-03T05:00:00Z","references":[{"type":"ADVISORY","url":"http://www.debian.org/security/2003/dsa-405"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/9321"},{"type":"FIX","url":"http://www.debian.org/security/2003/dsa-405"},{"type":"FIX","url":"http://www.securityfocus.com/bid/9321"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14098"}],"schema_version":"1.7.5"}