Lucene search
HistoryDec 31, 2004 - 5:00 a.m.
CVE-2004-0390
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.039
Percentile
92.0%
SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods.
Affected configurations
Node
scoopenserverMatch5.0.5
ORscoopenserverMatch5.0.6
ORscoopenserverMatch5.0.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sco | openserver | 5.0.5 | cpe:2.3:o:sco:openserver:5.0.5:*:*:*:*:*:*:* |
| sco | openserver | 5.0.6 | cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:* |
| sco | openserver | 5.0.7 | cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2004-0390
2005-04-14 04:00:00
cve
cve
CVE-2004-0390
2005-04-14 04:00:00
exploitdb
exploitdb
SCO OpenServer 5.0.x - StartX Weak XHost Permissions
2001-05-07 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.039
Percentile
92.0%
Related for NVD:CVE-2004-0390