Unixware Security Vulnerabilities

CVE-2000-0842

The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. (dot dot)...

CVE-1999-0979

The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is...

CVE-2000-0173

Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of...

CVE-1999-0693

Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root...

CVE-2000-0154

The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink...

CVE-2000-0224

ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink...

CVE-2000-0215

Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain...

CVE-2000-0130

Buffer overflow in SCO scohelp program allows remote attackers to execute...

CVE-2000-0099

Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt...

CVE-1999-1307

Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root...

CVE-2000-0003

Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental...

CVE-2000-0029

UnixWare pis and mkpis commands allow local users to gain privileges via a symlink...

CVE-2000-0026

Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization...

CVE-1999-0988

UnixWare pkgtrans allows local users to read arbitrary files via a symlink...

CVE-1999-0825

The default permissions for UnixWare /var/mail allow local users to read and modify other users'...

CVE-1999-0864

UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid...

CVE-1999-0866

Buffer overflow in UnixWare xauto program allows local users to gain root...

CVE-1999-0828

UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread...

CVE-1999-0845

Buffer overflow in SCO su program allows local users to gain root access via a long...

CVE-1999-0851

Denial of service in BIND named via...

CVE-1999-0835

Denial of service in BIND named via malformed SIG...

CVE-1999-0830

Buffer overflow in SCO UnixWare Xsco command via a long...

CVE-1999-0942

UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it...

CVE-1999-0368

Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a....

CVE-1999-1450

Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain...

CVE-1999-0798

Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header...

CVE-1999-0836

UnixWare uidadmin allows local users to modify arbitrary files via a symlink...

CVE-1999-0009

Inverse query buffer overflow in BIND 4.9 and BIND 8...

CVE-1999-0011

Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone...

CVE-1999-0010

Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS...

CVE-1999-0004

MIME buffer overflow in email clients, e.g. Solaris mailtool and...

CVE-1999-0017

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP...

CVE-1999-0024

DNS cache poisoning via BIND, by predictable query...

CVE-1999-0033

Command execution in Sun systems via buffer overflow in the at...

CVE-1999-1252

Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root...

CVE-1999-0023

Local user gains root privileges via buffer overflow in rdist, via lookup()...

CVE-1999-0019

Delete or create a file via rpc.statd, due to invalid...

CVE-1999-0078

pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC...