UIM LibUIM Environment Variables Privilege Escalation Weakness

UIM LibUIM Environment Variables Privilege Escalation Weakness

Solution:
The vendor has released version 0.4.5.1 to address this issue.

Mandrake has released an advisory (MDKSA-2005:046) and fixes to address this vulnerability. Customers are advised to peruse the referenced advisory for further information regarding obtaining and applying appropriate updates.

Gentoo has released advisory GLSA 200502-31 to address this issue. Gentoo updates can be applied by running the following commands as the superuser:
emerge --sync
emerge --ask --oneshot --verbose ">=app-i18n/uim-0.4.5.1"

Uim Uim 0.4.5

Uim uim-0.4.5.1.tar.gz
http://uim.freedesktop.org/releases/uim-0.4.5.1.tar.gz

MandrakeSoft Linux Mandrake 10.1

Mandrake libuim0-0.4.5.1-0.1.101mdk.i586.rpm
Mandrake Linux 10.1
http://www.mandrakesecure.net/en/ftp.php

Mandrake libuim0-devel-0.4.5.1-0.1.101mdk.i586.rpm
Mandrake Linux 10.1
http://www.mandrakesecure.net/en/ftp.php

Mandrake uim-0.4.5.1-0.1.101mdk.i586.rpm
Mandrake Linux 10.1
http://www.mandrakesecure.net/en/ftp.php

Mandrake uim-applet-0.4.5.1-0.1.101mdk.i586.rpm
Mandrake Linux 10.1
http://www.mandrakesecure.net/en/ftp.php

MandrakeSoft Linux Mandrake 10.1 x86_64

Mandrake lib64uim0-0.4.5.1-0.1.101mdk.x86_64.rpm
Mandrake Linux 10.1/x86_64
http://www.mandrakesecure.net/en/ftp.php

Mandrake lib64uim0-devel-0.4.5.1-0.1.101mdk.x86_64.rpm
Mandrake Linux 10.1/x86_64
http://www.mandrakesecure.net/en/ftp.php

Mandrake libuim0-0.4.5.1-0.1.101mdk.i586.rpm
Mandrake Linux 10.1/x86_64
http://www.mandrakesecure.net/en/ftp.php