CVE-2005-0503: Mandrakesoft Mandrake Linux

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.

Affected products

• Mandrakesoft Mandrake Linux: version 10.1 only
• Uim Uim: version 0.4.5 only

Published 2005-02-21. Last modified 2026-06-16.