363 matches found
CVE-2002-0517
Buffer overflow in X11 library libX11 on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privileges via a long -xrm argument to programs such as 1 dtterm or 2 xterm...
CVE-2002-0511
The default configuration of Name Service Cache Daemon nscd in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record, which could make it easier for remote attackers to bypass applications that restrict access based on host nam...
CVE-2002-0442
Buffer overflow in dlvraudit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges...
CVE-2002-0517
Buffer overflow in X11 library libX11 on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privileges via a long -xrm argument to programs such as 1 dtterm or 2 xterm...
CVE-2002-0517
The CVE-2002-0517 issue affects the X11 libX11 library in Caldera Open UNIX 8.0.0 and UnixWare 7.1.1 (and possibly other OSes). A buffer overflow occurs when handling a long -xrm argument in programs such as dtterm or xterm, allowing local users to gain root privileges. Exploitation details and a...
Caldera OpenServer 5.0.x - XSCO Color Database File Heap Overflow
Caldera OpenServer 5.0.x - XSCO Color Database File Heap Overflow source: https://www.securityfocus.com/bid/4985/info OpenServer is commercial Unix operating system originally developed by SCO, and distributed by Caldera. It may be possible for a local user to gain elevated privileges. When Xsco ...
Caldera OpenServer 5.0.x - XSCO Color Database File Heap Overflow
source: https://www.securityfocus.com/bid/4985/info OpenServer is commercial Unix operating system originally developed by SCO, and distributed by Caldera. It may be possible for a local user to gain elevated privileges. When Xsco is executed, and an excessively long argument is supplied to the -...
Security Update: [CSSA-2002-024.0] Volution Manager: Directory Administrator password in cleartext
To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Volution Manager: Directory Administrator password in cleartext Advisory number: CSSA-2002-024.0 Issue date: 2002 June 3 Cross reference: 1. Problem...
Multiple bugs in Caldera OpenServer utilities
Symlink problem on temporary files handling in sort and scoadmin...
Buffer overflow in Caldera OpenServer sar
Buffer overflow in -o command line option...
Sar -o exploitation process info.
Caldera recently released an update for the suid sar binary. At one point in time someone pointed out that sar -f had an overflow Brok Tellier or k2 probably I can't remember. The -f overflow was fixed but the -o option which I have seen in private security advisorys floating around also had an...
CVE-2002-0105
CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable...
CVE-2002-0105
CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable...
CVE-2002-0105
CVE-2002-0105 affects Caldera UnixWare 7.1.0 (and possibly other OSes) where /var/dt is world-writable. A local attacker can exploit a symlink attack on /var/dt/Xerrors to gain privileges. The root cause is the world-writable /var/dt directory enabling a symlink-based workaround. The provided doc...
CVE-2001-1063
Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S scheme command line argument...
Caldera UnixWare 7.1.1 - WebTop SCOAdminReg.cgi Arbitrary Command Execution
Caldera UnixWare 7.1.1 - WebTop SCOAdminReg.cgi Arbitrary Command Execution source: https://www.securityfocus.com/bid/3936/info UnixWare is a commercial Unix implementation distributed originally developed by SCO. It is now maintained and distributed by Caldera. The scoadminreg.cgi program does n...
Caldera UnixWare 7.1.1 - WebTop 'SCOAdminReg.cgi' Arbitrary Command Execution
source: https://www.securityfocus.com/bid/3936/info UnixWare is a commercial Unix implementation distributed originally developed by SCO. It is now maintained and distributed by Caldera. The scoadminreg.cgi program does not properly validate user input when executed with the -c option. Because of...
CVE-2001-1577
Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused...