Lucene search

[email protected]CVE-1999-1185

HistoryOct 06, 1998 - 4:00 a.m.

CVE-1999-1185

1998-10-0604:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

buffer overflow

sco mscreen

root privileges

.mscreenrc

terminal entry

local users

7.6 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

14.2%

JSON

Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.

CPENameOperatorVersion
sco:cmwsco cmweq3.0
sco:openserversco openservereq5.0
sco:open_desktopsco open desktopeq3.0
sco:internet_faststartsco internet faststarteqall_versions
sco:openserver_enterprise_systemsco openserver enterprise systemeq5.0.4p
sco:openserversco openservereq3.0

CPE	Name	Operator	Version
sco:cmw	sco cmw	eq	3.0
sco:openserver	sco openserver	eq	5.0
sco:open_desktop	sco open desktop	eq	3.0
sco:internet_faststart	sco internet faststart	eq	all_versions
sco:openserver_enterprise_system	sco openserver enterprise system	eq	5.0.4p
sco:openserver	sco openserver	eq	3.0

References

marc.info/?l=bugtraq&m=90686250717719&w=2

exchange.xforce.ibmcloud.com/vulnerabilities/1379

7.6 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

14.2%

JSON