CVE-2003-0704

CVE-2003-0704 describes a local privilege escalation vulnerability in KisMAC versions prior to 0.05d. The software insecurely trusts user-supplied environment variables, specifically $DRIVER_KEXT, when performing chown operations on files and directories. This flaw allows a local attacker to gain elevated privileges by manipulating this variable in several shell scripts. The vulnerability carries a CVSS score of 7.2, indicating high severity. It is a local attack (AV:L) with low attack complexity (AC:L) and requires no authentication (Au:N), leading to complete compromise of confidentiality, integrity, and availability (C:C/I:C/A:C). There is no evidence of active exploitation, and no exploit code is publicly available through Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public attention.