CVE-2001-1063

CVE-2001-1063 describes a local privilege-elevation in Caldera OpenUnix 8.0.0 and UnixWare 7 via a buffer overflow in the uidadmin utility. An overly long -S (scheme) command line argument can overflow a buffer, allowing a local user to gain root privileges. The vulnerability affects the uidadmin...

Security Update: [CSSA-2002-SCO.3] UnixWare 7: message catalog environment variable vulnerability

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare 7: message catalog environment variable vulnerability Advisory number: CSSA-2002-SCO.3 Issue date: 2002 February 7 Cross reference: 1. Problem Descripti...

Security Update: [CSSA-2001-SCO.39] Open UNIX, UnixWare 7: timed does not enforce nulls

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open UNIX, UnixWare 7: timed does not enforce nulls Advisory number: CSSA-2001-SCO.39 Issue date: 2001 December 10 Cross reference: 1. Problem Description The...

Security Update: [CSSA-2001-SCO.37] Open UNIX, UnixWare 7: xterms in saved CDE sessions

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open UNIX, UnixWare 7: xterms in saved CDE sessions Advisory number: CSSA-2001-SCO.37 Issue date: 2001 December 5 Cross reference: 1. Problem Description In...

Security Update: [CSSA-2001-SCO.32] Open UNIX, UnixWare 7: buffer overflow in ppp utilities

Caldera International, Inc. Security Advisory Subject: Open UNIX, UnixWare 7: buffer overflow in ppp utilities Advisory number: CSSA-2001-SCO.32 Issue date: 2001 November 12 Cross reference: 1. Problem Description There is a buffer overflow in several of the ppp utilities that are linked to...

Security Update: [CSSA-2001-SCO.26] dtterm argument buffer overflow

To: [email protected] [email protected] [email protected] [email protected] Do not reply to this mail. This security advisory is being sent from a nonexistent address in order to avoid spam problems. Caldera's contact address for UNIX security issue...

Security Update: [CSSA-2001-SCO.21] Open Unix, UnixWare 7: dtaction argument buffer overflow

To: [email protected] [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open Unix, UnixWare 7: dtaction argument buffer overflow Advisory number: CSSA-2001-SCO.21 Issue date: 2001 October 1...

Security Update: [CSSA-2001-SCO.22] Open Unix, UnixWare 7: dtprintinfo environment buffer overflow

To: [email protected] [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open Unix, UnixWare 7: dtprintinfo environment buffer overflow Advisory number: CSSA-2001-SCO.22 Issue date: 2001...

Security Update: [CSSA-2001-SCO.23] Open Unix, UnixWare 7: dtsession environment buffer overflow

To: [email protected] [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open Unix, UnixWare 7: dtsession environment buffer overflow Advisory number: CSSA-2001-SCO.23 Issue date: 2001 Octobe...

CVE-2001-1164

Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to 1 uucp, 2 uux, 3 bnuconvert, 4 uucico, 5 uuxcmd, or 6 uuxqt...

Caldera Systems security advisory: libcurses, atcronsh, rtpm

Caldera Systems, Inc. Security Advisory Subject: curses library, rtpm, atcronsh Advisory number: CSSA-2001-SCO.1 Issue date: 2001 June, 22 Cross reference: 1. Problem Description A buffer overrun vulnerability has been found in the curses library. A malicious user could attack a setuid,gid comman...

CVE-2000-1014

Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter...

CVE-2000-1014

The CVE-2000-1014 entry concerns a format string vulnerability in the search97.cgi CGI script of the SCO help HTTP server for Unixware 7 . The flaw allows remote attackers to execute arbitrary commands through format string characters supplied in the queryText parameter, enabling potential remote...

CVE-2000-1014: Undefined Security Weakness

Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter...

CVE-2000-0842

The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0842

The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0842

CVE-2000-0842 affects the UnixWare 7 scohelphttp webserver. The vulnerability is in the search97cgi/vtopic component, where a path traversal via a .. (dot dot) attack could allow remote attackers to read arbitrary files. The available connected sources (NVD, CVE listings) confirm the affected pro...

CVE-2000-0842: Undefined Security Weakness

The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. dot dot attack...

Дырка в scohelphttp (Unixware 7)

Обратный путь в директориях позволяет получить любой файл с сервера...

Unixware 7.0 - SCOhelp HTTP Server Format String

Unixware 7.0 - SCOhelp HTTP Server Format String source: https://www.securityfocus.com/bid/1717/info SCO Unixware 7 default installation includes scohelp, an http server that listens on port 457/tcp and allows access to manual pages and other documentation files. The search CGI script provided fo...