Security Update: [CSSA-2001-SCO.25] OpenServer: various scoadmin/sysadm subprograms have buffer overflows

To: [email protected] [email protected] [email protected] [email protected] Do not reply to this mail. This security advisory is being sent from a nonexistent address in order to avoid spam problems. Caldera's contact address for UNIX security issue...

SCO OpenServer/UnixWare vi creates temporary files insecurely

Overview The implementation of vi, a text editor, provided with SCO Openunix creates insecure temporary files with predictable names. Using a symbolic link attack, an intruder can overwrite any file writable by the user of vi. Description vi is a screen-oriented text editor. The implementation...

CVE-1999-1253

The CVE-1999-1253 entry concerns a vulnerability in the kernel error handling routine of SCO OpenServer (versions 5.0.2 and earlier) and SCO Internet FastStart 1.0. This local issue can allow a user to gain root privileges due to improper handling in the kernel error path. The available documents...

CVE-1999-1253

Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to gain root privileges...

CVE-1999-1041

CVE-1999-1041 is a local privilege escalation affecting SCO OpenServer 5.0 and SCO UNIX 3.2v4 through a buffer overflow in the mscreen program. The vulnerability can be triggered by processing an excessively long TERM environment variable and by an overly long entry in the .mscreenrc file, enabli...

CVE-1999-1041

Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via 1 a long TERM environmental variable and 2 a long entry in the .mscreenrc file...

CVE-2001-1062

Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code...

Security Update: [CSSA-2001-SCO.12] OpenServer: mana buffer overflow

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: OpenServer: mana buffer overflow Advisory number: CSSA-2001-SCO.12 Issue date: 2001 August 17 Cross reference: 1. Problem Description...

Проблемы с mana в OpenServer (privelege escalation)

No description provided...

CVE-2001-0587

deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command...

CVE-2001-0627

vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack...

CVE-2001-0575

Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long first argument to lpshut...

CVE-2001-0588

sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command...

CVE-2001-0576

lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a buffer overflow attack in the '-u' command line parameter...

CVE-2001-0577

recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument...

CVE-2001-0578

Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument to the lpforms command...

CVE-2001-0579

lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command...

CVE-2001-0588

CVE-2001-0588 affects sendmail 8.9.3 included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6. A local attacker can gain additional privileges via a buffer overflow in the first argument to the command. The root cause is a buffer overflow in handling the first argument, leading to partial c...

CVE-2001-0579

lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command...

CVE-2001-0577

CVE-2001-0577 concerns a local-privilege escalation in SCO OpenServer 5.0–5.0.6, where a buffer overflow in the first command-line argument can allow a local attacker to gain additional privileges. The affected software is SCO OpenServer 5.0 through 5.0.6; the underlying cause is a buffer overflo...