CVE-2002-0246: Caldera Unixware

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE environment variable to read other message catalogs containing format strings from setuid programs such as vxprint.

Affected products

• Caldera Unixware: version 7.1.1 only

Published 2002-05-29. Last modified 2026-06-16.