CVE-2003-0658 Path traversal in n/a

Medium 5.0 Published 3 Sep 2003 Updated 8 Aug 2024

Remote attackers can read arbitrary publicly readable files on Caldera and SCO Linux systems due to insecure Apache configuration in Docview.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2003-0658?

CVE-2003-0658 is a medium-severity path traversal vulnerability in Sco Unixware, published on 3 Sep 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files via a certain URL, possibly related to rewrite rules.

Which versions are affected by CVE-2003-0658?

It affects 4 products.

Products include Caldera Openlinux Server, Caldera Openlinux Workstation, Caldera Openserver, Sco Unixware.

How do I fix CVE-2003-0658?

No fix has been published for CVE-2003-0658 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2003-0658 being exploited?

There is no known exploitation of CVE-2003-0658 in the wild and no public exploit code.

All Sco Unixware vulnerabilities

Sources

Also known as GHSA-c8mf-m8jc-frfr.