Caldera OpenUnix8 Overflows (reject, lpsystem, su)

I contacted Caldera SCO about some local overflows in a few binaries that came default with my install of OpenUnix8... Here is a snippet of the email dialog between us. Due to the lack of access to the machine and lack of a good debugger on the system, I have not had time to put any further...

CVE-2001-0181

Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands...

CVE-2001-0181

Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands...

CVE-2001-0181

The CVE-2001-0181 entry concerns a format-string vulnerability in the error-logging path of the DHCP server and client in Caldera Linux. The underlying flaw is in how logging is performed, allowing a remote attacker to execute arbitrary commands. The available documents confirm the affected compo...

CVE-2000-0374

The CVE describes that the default configuration of kdm (Caldera/Mandrake Linux and possibly others) allows XDMCP connections from any host, causing information leakage and potential bypass of access restrictions. CERT/CC notes this as an information leakage vulnerability via XDMCP daemon default...

CVE-2000-0369

The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of service...

CVE-2000-0374

The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions...

CVE-2000-0369

The CVE-2000-0369 entry describes a vulnerability in the IDENT server of Caldera Linux 2.3 where the server spawns multiple threads per IDENT request. This threading pattern can be exploited by remote attackers to trigger a denial-of-service condition against the impacted system. The reported imp...

CVE-2000-0667

Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service...

CVE-2000-0667

The CVE-2000-0667 issue affects the Linux gpm daemon (the General Purpose Mouse utility) and allows a local user to delete arbitrary files. Concrete details from connected sources indicate the vulnerability exists in gpm versions 1.19.2 and earlier and is exploitable by a local user to remove fil...

CVE-2000-0667

Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service...

Security Update: DoS on gpm

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Caldera Systems, Inc. Security Advisory Subject: DoS on gpm Advisory number: CSSA-2000-024.0 Issue date: 2000 July, 6 Cross reference: 1. Problem Description There are security problems within gpm General Purpose Mouse support daemon which allow remov...

CVE-2000-0370

CVE-2000-0370 affects Caldera Linux smail. The debug option allows remote command execution via shell metacharacters in the -D option for rmail, enabling full compromise of confidentiality, integrity, and availability (CVSSv2 base score 10.0). Exploitation details are not provided in the availabl...

CVE-2000-0370

The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command...

CVE-2000-0372

Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges...

CVE-2000-0372

CVE-2000-0372 describes a local privilege escalation in Caldera’s rmt command within the dump package 0.4b4, enabling a local user to gain root privileges. The vulnerability is supported by NVD data (CVSSv2 base score 7.2; LOCAL access; no authentication; full confidentiality, integrity, and avai...

CVE-2000-0372

Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges...

CVE-2000-0192

The default installation of Caldera OpenLinux 2.3 includes the CGI program rpmquery, which allows remote attackers to determine what packages are installed on the system...

CVE-2000-0192

The CVE-2000-0192 issue affects the default installation of Caldera OpenLinux 2.3 via the rpm_query CGI, which allows remote attackers to enumerate installed RPMs by accessing the CGI over the web server. This leads to information disclosure about installed services and versions (partial confiden...

CVE-2000-0192

The default installation of Caldera OpenLinux 2.3 includes the CGI program rpmquery, which allows remote attackers to determine what packages are installed on the system...