CVE-1999-1209

Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges...

CVE-1999-1138

SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories 1 /tmp for the dos user, and 2 /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable...

CVE-1999-1162

Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system...

CVE-2001-0627

The CVE cites SCO OpenServer’s vi (5.0.0–5.0.6) as vulnerable: it creates insecure, world-writable temporary files in /tmp with predictable names, allowing a local attacker to exploit a symlink to overwrite arbitrary files writable by the user. The impact is file integrity loss for targeted files...

CVE-1999-1209

CVE-1999-1209 describes a local privilege escalation in the “scoterm” component of SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0. The vulnerability allows local users to gain root privileges. The Initial Description does not provide concrete details on vulnerable files, exact root cause...

Censoft TERM Emu bOf

Vendor: www.censoft.com Product: TERM for UNIX / Linux Emulations Wyse 60, SCO ANSI, VT220 Terminal Supports SCO, AIX, HP, DEC, Solaris Operating Environmenttm software, and Linuxtm I WAS going to purchase this product after trying the eval however I changed my mind for some reason...I would...

SCO UnixWare 7.1.X

Well.. Looks like a insecure file vuln exsists within the system created file when you do the initial install of SCO. Lets take a look here at /var/adm/isl/ifile [email protected] ls -l /var/adm/isl/ifile -rw-r--r-- 1 root root 4691 Sep 24 1999 /var/adm/isl/ifile And we all know the shadow file ...

CVE-2001-1508

Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument...

CVE-2001-1578

Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers and segment descriptors...

Многочисленные дырки в дистрибутиве SCO 5.0.6

В дистрибутив вошли старые версии различных продуктов имеющие удаленны и локальные уязвимости...

Переполнения буфера в setcontext и sysi86 под SCO OpenServer (buffer overflow)

No description provided...

SCO skunkware top format strings issue

This is a known issue with other vendors... top format strings issue. SCO never "supported" skunkware it was out of courtesy that the binarys were provided as I was once told. I assume Caldera takes the same position. [email protected] ls -al /usr/local/bin/top lrwxrwxrwx 1 root s...

Многочисленные переполнения буфера в утилитах администрирования SCO

Переполнения буфера в atcronsh, auditsh, authsh, backupsh, lpsh, sysadm.menu, termsh...

SCO OpenServer/UnixWare vi creates temporary files insecurely

Overview The implementation of vi, a text editor, provided with SCO Openunix creates insecure temporary files with predictable names. Using a symbolic link attack, an intruder can overwrite any file writable by the user of vi. Description vi is a screen-oriented text editor. The implementation...

CVE-1999-1303

Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access...

CVE-1999-1302

Unspecified vulnerability in ptchmod in SCO UNIX 4.2 and earlier allows local users to gain root access...

CVE-1999-1450

Vulnerability in 1 rlogin daemon rshd and 2 scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges...

CVE-1999-1252

Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges...

CVE-1999-1305

Technical details about CVE-1999-1305 are not publicly available in the supplied documents. No explicit affected product versions, root cause, or mitigation are provided. Monitor for updates.

CVE-1999-1185

The CVE-1999-1185 issue affects SCO mscreen and is caused by a buffer overflow in handling a long TERM entry in the .mscreenrc file, enabling local users to gain root privileges. The provided documents identify the vulnerable component and the impact (local privilege escalation) but do not includ...