CVE-1999-0942

UnixWare dos7utils is affected by CVE-1999-0942. A local user can gain root privileges by using the STATICMERGE environment variable to locate and execute a script. The vulnerability is triggered by how STATICMERGE is resolved and used by the utility, enabling privilege escalation. Affected versi...

SCO_root_exploit.txt

Greetings, A vulnerability exists in the /usr/lib/merge/dos7utils program suid root by default which allows any user to execute any command as root. The dos7utils program gets its localeset.sh exec path from the environment variable STATICMERGE. By setting this to a directory writable by us and...

PT-1999-1480 · Unixware · Dos7Utils

Name of the Vulnerable Software and Affected Versions: UnixWare dos7utils affected versions not specified Description: The issue allows a local user to gain root privileges by utilizing the STATICMERGE environmental variable. This variable is used to find a script that is then executed, potential...