798 matches found
PT-1999-1441 · Sco · Sco Openserver
Name of the Vulnerable Software and Affected Versions: SCO OpenServer affected versions not specified Description: The issue allows local users to corrupt files through a symlink attack, exploiting the userOsa in SCO OpenServer. Recommendations: At the moment, there is no information about a newe...
SCO Open Server 5.0.5 - 'userOsa' Symlink
source: https://www.securityfocus.com/bid/701/info Under certain versions of SCO OpenServer there exists a symlink vulnerability which can be exploited to overwrite any file which is group writable by the 'auth' group. The problem in particular is in the the /etc/sysadm.d/bin/userOsa executable...
SCO Open Server 5.0.5 - userOsa Symlink
SCO Open Server 5.0.5 - userOsa Symlink source: https://www.securityfocus.com/bid/701/info Under certain versions of SCO OpenServer there exists a symlink vulnerability which can be exploited to overwrite any file which is group writable by the 'auth' group. The problem in particular is in the th...
SCO Open Server 5.0.5 - cancel Buffer Overflow
// source: https://www.securityfocus.com/bid/702/info There is a buffer overflow vulnerability in /opt/K/SCO/Unix/5.0.5Eb/.softmgmt/var/usr/bin/cancel. It is important to know that the overflows are not in "/usr/bin/cancel" or "/usr/lpd/remote/cancel". The consequence of this vulnerability being...
SCO Open Server 5.0.5 - cancel Buffer Overflow
SCO Open Server 5.0.5 - cancel Buffer Overflow // source: https://www.securityfocus.com/bid/702/info There is a buffer overflow vulnerability in /opt/K/SCO/Unix/5.0.5Eb/.softmgmt/var/usr/bin/cancel. It is important to know that the overflows are not in "/usr/bin/cancel" or "/usr/lpd/remote/cancel...
sco_local_exploit.txt
Greetings, More SCO 5.0.x exploits, this time for scosession and scoterm. You'll only get egid=2bin out of scosession, but root for scoterm. Brock Tellier UNIX Systems Administrator Webley Systems www.webley.com --- scosessionx.c --- / SCO 5.0.x scosession local bin exploit sgid bin Will set...
SCO_lpr_vuln.txt
Subject: SCO 5.0.5 lpr local root exploit To: [email protected] Greetings, There is a hole in SCO 5.0.5, probably 5.0.x, /usr/bin/lpr. Or more accurately, /usr/lpd/remote/lp, which lpr execs and passes your command line args on to. This means that while /usr/bin/lpr is sgid lp, we'll stil...
sco_bof.txt
Subject: 19 SCO 5.0.5+Skunware98 buffer overflows To: [email protected] Greetings, After some light security auditing ; I've found approximately nineteen buffer overflows in various SCO 5.0.5+Skunkware98 programs. This was, by no means, a comprehensive audit of SCO's su/gids so I'm sure...
CVE-1999-0697
SCO Doctor allows local users to gain root privileges through a Tools option...
SCO Open Server 5.0.5 - X Library Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/638/info A buffer overflow vulnerability in the shared X library may allows local users to obtain higher privileges. Any setuid applications linked against the library are possibly vulnerable. The vulnerability is in the handling of the '-bg' command...
SCO Open Server 5.0.5 - X Library Buffer Overflow (1)
SCO Open Server 5.0.5 - X Library Buffer Overflow 1 // source: https://www.securityfocus.com/bid/638/info A buffer overflow vulnerability in the shared X library may allows local users to obtain higher privileges. Any setuid applications linked against the library are possibly vulnerable. The...
mscreen-sco.sh
Date: Sat, 26 Sep 1998 12:20:04 +0400 From: Leshka Subject: Root exploit for SCO OpenServer. The following text is in the "koi8-r" character set. Your display is set for the "US-ASCII" character set. Some characters may be displayed incorrectly. !/bin/sh Hi ! This is a buffer overflow exploit for...
sco.termvision.win95.txt
Date: Wed, 31 Mar 1999 16:50:13 +0100 From: JJ Gray To: [email protected] Subject: Potential vulnerability in SCO TermVision Windows 95 client Hi folks, I recently downloaded a trial version of the SCO TermVision terminal emulation package for SCO Openserver 5 and Windows 95...
SCO Open Server 5.0.5 - X Library Buffer Overflow (2)
SCO Open Server 5.0.5 - X Library Buffer Overflow 2 // source: https://www.securityfocus.com/bid/638/info A buffer overflow vulnerability in the shared X library may allows local users to obtain higher privileges. Any setuid applications linked against the library are possibly vulnerable. The...
SCO Open Server 5.0.5 - XBase Buffer Overflow
SCO Open Server 5.0.5 - XBase Buffer Overflow // source: https://www.securityfocus.com/bid/479/info The XBase package that ships with SCO OpenServer 5.0. is vulnerable to several buffer overflow attacks in many different XBase tools. The tools that are installed setuid root allow local users to...
SCO Open Server 5.0.5 - XBase Buffer Overflow
// source: https://www.securityfocus.com/bid/479/info The XBase package that ships with SCO OpenServer 5.0. is vulnerable to several buffer overflow attacks in many different XBase tools. The tools that are installed setuid root allow local users to gain superuser privileges. This is because they...
CVE-1999-0411
Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access...
CVE-1999-0476
A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user...
PT-1999-1157 · Sco · Sco Termvision
Name of the Vulnerable Software and Affected Versions: SCO TermVision affected versions not specified Description: A weak encryption algorithm is used for passwords, allowing them to be easily decrypted by a local user. Recommendations: At the moment, there is no information about a newer version...