CVE-2003-0949: Michael Bischoff Xsok

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands.

Affected products

• Michael Bischoff Xsok: version 1.02 only

Published 2004-02-03. Last modified 2026-06-16.