CVE-2003-0742: Sco Openserver

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to run as if it were called from ncsa_httpd, then modifying the PATH environment variable to point to a malicious "hostname" program.

Affected products

• Sco Openserver: version 5.0.5 only; version 5.0.6 only; version 5.0.7 only

Published 2003-10-06. Last modified 2026-06-16.