[NILESA-20050701] UnixWare 7.x RPC portmapper Dos Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================================ NileSOFT Security Advisory - -------------------------------------------------------------------------------- ID : NILESA-20050701 Title : rpcbind Invalid portmap Request...

CVE-2002-1998

Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtablecreate procedure 21...

CVE-2002-1998

CVE-2002-1998 describes a buffer overflow in rpc.cmsd on SCO UnixWare 7.1.1 and Open UNIX 8.0.0 that allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21). Multiple sources (NVD, Red Hat advisory, CVE records) corroborate this description and t...

CVE-2001-1478

Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code...

CVE-2005-0134

The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets...

CVE-2005-0134

The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets...

CVE-2005-0134

Technical details about CVE-2005-0134 are not publicly available in the provided connected documents. No affected versions, root cause, impact, or mitigations are disclosed here. Monitor for updates.

OpenServer 5.0.7 UnixWare 7.1.4 UnixWare 7.1.3 : Hyper-Threading information leakage

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: OpenServer 5.0.7 UnixWare 7.1.4 UnixWare 7.1.3 : Hyper-Threading information leakage Advisory number: SCOSA-2005.24 Issue date: 2005 May 13 Cross reference: sr893223 fz531468 erg712804 sr893224 fz531469 erg712805...

CVE-2004-1124

CVE-2004-1124 describes a local privilege/escape issue in SCO UnixWare 7.1.1–7.1.4 where the chroot jail can be broken, enabling local users to escape and perform unauthorized actions. The vulnerability affects specific binaries listed by SCO (e.g., /etc/conf/pack.d/namefs/Driver_atup.o, Driver_m...

CVE-2004-1124

Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized activities...

CVE-2004-1039

The CVE-2004-1039 issue affects SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1 (and possibly other versions) when NFS mountd is run via inetd. The vulnerability arises because inetd spawns a new mountd process for each NFS mount-related request, causing memory exhaustion and potentially a system cra...

CVE-2004-1039

The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service memory exhaustion via a series of requests, which causes inetd to launch a separate process for each request...

SCO UnixWare chroot protection bypass

No description provided...

Unixware mountd DoS

Multiple connections lead to system resources exhaustion...

[NILESA-20050101]: Denial of Service vulnerability due to the mountd bug

================================================================================ NileSOFT Security Advisory -------------------------------------------------------------------------------- ID : NILESA-20050101 Title : Denial of Service vulnerability due to the mountd bug Vendor : SCO URL :...

Unixware execve /bin/sh 95 bytes

Exploit for unixware platform in category shellcode ================================ Unixware execve /bin/sh 95 bytes ================================ / UnixWare execve of /bin/sh by K2 / char shell = "\xeb\x48\x9a\xff\xff\xff\xff\x07\xff\xc3\x5e\x31\xc0\x89\x46\xb4"...

Unixware execve /bin/sh 95 bytes

Unixware execve /bin/sh 95 bytes. Shellcode exploit for unixware platform / UnixWare execve of /bin/sh by K2 / char shell = "\xeb\x48\x9a\xff\xff\xff\xff\x07\xff\xc3\x5e\x31\xc0\x89\x46\xb4" "\x88\x46\xb9\x88\x46\x07\x89\x46\x0c\x31\xc0\x50\xb0\x8d\xe8\xdf"...

Unixware execve /bin/sh 95 bytes

No description provided by source. / UnixWare execve of /bin/sh by K2 / char shell = "\xeb\x48\x9a\xff\xff\xff\xff\x07\xff\xc3\x5e\x31\xc0\x89\x46\xb4" "\x88\x46\xb9\x88\x46\x07\x89\x46\x0c\x31\xc0\x50\xb0\x8d\xe8\xdf" "\xff\xff\xff\x83\xc4\x04\x31\xc0\x50\xb0\x17\xe8\xd2\xff\xff\xff"...

CVE-2002-1231

SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc...

CVE-2002-1231

CVE-2002-1231 affects SCO UnixWare 7.1.1 and Open UNIX 8.0.0. A local user can trigger a denial of service by performing an rcp of /proc. Vulnerable binaries include /etc/conf/pack.d/fs/Driver_atup.o and Driver_mp.o. The advisory CSSA-2002-SCO.41 provides fixed packages: erg712112c.pkg.Z for Unix...