{"id": "EDB-ID:21489", "type": "exploitdb", "bulletinFamily": "exploit", "title": "Caldera OpenServer 5.0.5/5.0.6 SCOAdmin Symbolic Link Vulnerability", "description": "Caldera OpenServer 5.0.5/5.0.6 SCOAdmin Symbolic Link Vulnerability. CVE-2002-0887. Local exploit for sco platform", "published": "2002-05-29T00:00:00", "modified": "2002-05-29T00:00:00", "cvss": {"score": 2.1, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "href": "https://www.exploit-db.com/exploits/21489/", "reporter": "Kevin Finisterre", "references": [], "cvelist": ["CVE-2002-0887"], "lastseen": "2016-02-02T16:35:56", "viewCount": 2, "enchantments": {"score": {"value": 5.1, "vector": "NONE", "modified": "2016-02-02T16:35:56", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2002-0887"]}, {"type": "osvdb", "idList": ["OSVDB:5060"]}], "modified": "2016-02-02T16:35:56", "rev": 2}, "vulnersScore": 5.1}, "sourceHref": "https://www.exploit-db.com/download/21489/", "sourceData": "source: http://www.securityfocus.com/bid/4875/info\r\n\r\nA vulnerability has been reported in the scoadmin utility that may allow a local attacker to overwrite any file. The vulnerability is due to the predictable naming of temporary files used by scoadmin. When writing to temporary files, there are no checks to ensure that it does not already exist. Symbolic links will also be followed. This behaviour may be exploited by local attackers to corrupt arbitrary files.\r\n\r\nln -s /etc/passwd /tmp/tclerror.1195.log\r\n\r\nIf the process ID of the SCOadmin process is 1195, /etc/passwd will be overwritten.\r\n\r\n\r\n", "osvdbidlist": ["5060"]}

{"cve": [{"lastseen": "2020-10-03T11:37:00", "description": "scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files.", "edition": 3, "cvss3": {}, "published": "2002-10-04T04:00:00", "title": "CVE-2002-0887", "type": "cve", "cwe": ["NVD-CWE-Other"], "bulletinFamily": "NVD", "cvss2": {"severity": "LOW", "exploitabilityScore": 3.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 2.1, "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2002-0887"], "modified": "2016-10-18T02:22:00", "cpe": ["cpe:/a:caldera:openserver:5.0.6", "cpe:/a:caldera:openserver:5.0.5"], "id": "CVE-2002-0887", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2002-0887", "cvss": {"score": 2.1, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:N"}, "cpe23": ["cpe:2.3:a:caldera:openserver:5.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:caldera:openserver:5.0.6:*:*:*:*:*:*:*"]}], "osvdb": [{"lastseen": "2017-04-28T13:19:59", "bulletinFamily": "software", "cvelist": ["CVE-2002-0887"], "edition": 1, "description": "# No description provided by the source\n\n## References:\n[Vendor Specific Advisory URL](ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.22.1/CSSA-2002-SCO.22.1.txt)\nISS X-Force ID: 9210\n[CVE-2002-0887](https://vulners.com/cve/CVE-2002-0887)\nBugtraq ID: 4875\n", "modified": "2004-04-08T23:14:03", "published": "2004-04-08T23:14:03", "id": "OSVDB:5060", "href": "https://vulners.com/osvdb/OSVDB:5060", "title": "SCO OpenServer scoadmin Symlink Overwrite Arbitrary File", "type": "osvdb", "cvss": {"score": 2.1, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}}]}