726 matches found
SCO UnixWare < 7.1.4 p534589 (pkgadd) Local Root Exploit
No description provided by source. !/bin/ksh 04/2008: public release SCO UnixWare 7.1.4 p534589 if id -un = 'root' ; then grep -v $1-root$ /var/adm/sulog su.log cp su.def /etc/default/su cp su.log /var/adm/sulog rm -f su.def su.log woot.log else echo ------------------------------------ echo...
Windows 3.11/95/NT 4.0/NT 3.5.1 "Out Of Band" Data Denial of Service (3)
No description provided by source. source: http://www.securityfocus.com/bid/2010/info Older versions of Microsoft Windows 95, Windows for Workgroups 3.11, Windows NT up to and including 4.0, as well as SCO Open Server 5.0, have a vulnerability relating to the way they handle TCP/IP Out of Band...
SCO OpenServer 5.0.6/5.0.7 NWPrint Command Line Argument Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12986/info nwprint that is distributed with SCO OpenServer is prone to a local buffer overflow vulnerability. This issue arises because the application fails to perform boundary checks prior to copying user-supplied data...
Windows 3.11/95/NT 4.0/NT 3.5.1 "Out Of Band" Data Denial of Service (2)
No description provided by source. source: http://www.securityfocus.com/bid/2010/info Older versions of Microsoft Windows 95, Windows for Workgroups 3.11, Windows NT up to and including 4.0, as well as SCO Open Server 5.0, have a vulnerability relating to the way they handle TCP/IP Out of Band...
SCO Open Server <= 5.0.5 XBase Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/479/info The XBase package that ships with SCO OpenServer 5.0. is vulnerable to several buffer overflow attacks in many different XBase tools. The tools that are installed setuid root allow local users to gain superuser...
SCO Open Server 5.0.6 lpshut Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2555/info SCO OpenServer 5.0.6 and possibly earlier versions ships with several suid bin executables used in printer administration and related tasks. This includes lpshut, a component used to shut down the LP print...
SCO OpenServer 5.0.6 lpadmin Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2553/info SCO OpenServer 5.0.6 and possibly earlier versions ships with several suid 'bin' executables used in printer administration and related tasks. This includes lpadmin, a component used to manage and configure prin...
SCO Open Server 5.0.6 lpforms Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2554/info SCO OpenServer 5.0.6 and possibly earlier versions ships with several suid bin executables used in printer administration and related tasks. This includes lpforms, a component used to manage and configure print...
SCO Open Server 5.0.6 recon Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2560/info SCO OpenServer 5.0.6 and possibly earlier versions ships with a suid 'bin' executable called 'recon'. 'recon' is used to buffer and forward escape sequences from a user's input to timing-sensitive applications...
SCO OpenServer 5.0.x StartX Weak XHost Permissions Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2731/info OpenServer is a Unix based operating system distributed by Santa Cruz Operations. A problem in access control of the X server could allow a local user to gain elevated privileges. When the X Window System is...
SCO Open Server 5.0.5 X Library Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/638/info A buffer overflow vulnerability in the shared X library may allows local users to obtain higher privileges. Any setuid applications linked against the library are possibly vulnerable. The vulnerability is in the...
Tridia DoubleVision 3.0 7.00 Local Root Compromise
No description provided by source. source: http://www.securityfocus.com/bid/1697/info A utility integral to Tridia DoubleVision for SCO UnixWare 7.x has been found to be vulnerable to a buffer overflow attack. dvtermtype, which is setuid root, is run by a user at login time to tell DoubleVision...
SCO Open Server 5.0.5 cancel Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/702/info There is a buffer overflow vulnerability in /opt/K/SCO/Unix/5.0.5Eb/.softmgmt/var/usr/bin/cancel. It is important to know that the overflows are not in /usr/bin/cancel or /usr/lpd/remote/cancel. The consequence o...
SCO Unixware 7.1 '/var/mail' permissions Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/849/info Certain versions of SCO's UnixWare only 7.1 was tested ship with the /var/mail/ directory with permission 777-rwxrwxrwx . This in effect allows malicious users to read incoming mail for users who do not yet have ...
SCO UNIX 5 calserver Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2353/info Versions of SCO Unix calserver are vulnerable to a buffer overflow attack which can permit root access to a remote attacker. / include stdio.h include fcntl.h include netdb.h include sys/types.h include...
SCO Unixware 7.0/7.0.1/7.1/7.1.1 'xauto' Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/848/info Certain versions of SCO's UnixWare ship with a version of /usr/X/bin/xauto which is vulnerable to a buffer overflow attack which may result in an attacker gaining root privileges. This is exploitable to gain root...
SCO Open Server 5.0.6 lpusers Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2557/info SCO OpenServer 5.0.6 and possibly earlier versions ships with several suid bin executables used in printer administration and related tasks. This includes lpusers, a component used to set the queue priority of...
X11R6 <= 6.4 XKEYBOARD - Local Buffer Overflow Exploit (sco/x86)
No description provided by source. / X11R6 XKEYBOARD extension Strcmp for SCO UnixWare 7.1.3 x86 Copyright 2006 RISE Security [email protected], Ramon de Carvalho Valle [email protected] This program is free software; you can redistribute it and/or modify it under the terms of the GNU...
SCO Unixware 7.0/7.0.1/7.1/7.1.1 'uidadmin' Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/842/info Certain versions of SCO Unixware ship with an exploitable version of the /usr/bin/uidadmin program. The problem lies in that 'uidadmin' runs with root privileges and performs insecure writes to a scratch director...
SCO Open Server 5.0.5 X Library Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/638/info A buffer overflow vulnerability in the shared X library may allows local users to obtain higher privileges. Any setuid applications linked against the library are possibly vulnerable. The vulnerability is in the...