CVE-2003-0742

CVE-2003-0742 describes a local privilege escalation vulnerability in SCO Internet Manager (mana) affecting SCO OpenServer. An attacker can manipulate environment variables (REMOTE_ADDR and PATH) to trick the menu.mana script into executing a malicious "hostname" program. This allows for arbitrary code execution with the privileges of the mana process. The vulnerability has a CVSS score of 7.2, indicating high severity due to its local attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Its EPSS score is very low, suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. It is considered an inactive threat.