CVE-2002-0442

The CVE-2002-0442 relates to a buffer overflow in the dlvr_audit component of Caldera OpenServer versions 5.0.5 and 5.0.6. Exploitation would allow local users to escalate privileges to root. The provided documents confirm the affected product, vulnerable function, and outcome (local privilege es...

CVE-1999-1571

CVE-1999-1571 describes a buffer overflow in the sar utility on SCO OpenServer 5.0.0–5.0.5 that may allow a local user to gain root privileges via a long -f parameter. The form of impact is local privilege escalation with complete confidentiality/integrity/availability impacts per the entry. The ...

CVE-1999-1571

Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability than CVE-1999-1570...

CVE-2002-0887

scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files...

CVE-1999-1570

CVE-1999-1570 describes a buffer overflow in the OpenServer 5.0.5 implementation of the choose-file utility sar, exploitable by a local user through a long -o parameter to gain root privileges. The description specifies a local-privilege escalation impact (root) but does not provide exploitation ...

CVE-1999-1570

Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter...

CVE-2002-0716

Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name argument...

CVE-2002-0442

Buffer overflow in dlvraudit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges...

CVE-2001-1062

CVE-2001-1062 describes a buffer overflow in the mana component of OpenServer 5.0.6a and earlier, enabling local users to execute arbitrary code. The vulnerability is rooted in a buffer overflow condition; no exploitation details, affected versions, or remediation steps are provided beyond the pr...

CVE-2001-0896

The CVE-2001-0896 entry concerns Inetd on OpenServer 5.0.5. A remote attacker can trigger a denial of service (crash) by issuing a port scan (e.g., with nmap -PO). The connected records (CVE and NVD entries) confirm the affected product and the crash-inducing behavior but do not provide concrete ...

CVE-2001-0896

Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service crash via a port scan, e.g. with nmap -PO...

CVE-2001-1062

Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code...

SCO Openserver Xsco heap overflow.

====================================================================== Strategic Reconnaissance Team Security Advisory SRT2002-06-11-1037 Topic : SCO OpenServer Xsco heap overflow Date : June 11, 2002 Credit : KF dotslashatsnosoft.com Site : http://www.snosoft.com...

Buffer overflow in OpenServer Xsco

Buffer overflow on command line parsing...

Caldera OpenServer 5.0.x - XSCO Color Database File Heap Overflow

Caldera OpenServer 5.0.x - XSCO Color Database File Heap Overflow source: https://www.securityfocus.com/bid/4985/info OpenServer is commercial Unix operating system originally developed by SCO, and distributed by Caldera. It may be possible for a local user to gain elevated privileges. When Xsco ...

Caldera OpenServer 5.0.x - XSCO Color Database File Heap Overflow

source: https://www.securityfocus.com/bid/4985/info OpenServer is commercial Unix operating system originally developed by SCO, and distributed by Caldera. It may be possible for a local user to gain elevated privileges. When Xsco is executed, and an excessively long argument is supplied to the -...

OpenServer crontab format string bug

Format string bug in command line arguments parsing...

SRT Security Advisory (SRT2002-06-04-1711): SCO crontab

====================================================================== Strategic Reconnaissance Team Security Advisory SRT2002-06-04-1611 Topic : SCO OpenServer crontab format string vulnerability Date : June 04, 2002 Credit : KF dotslashatsnosoft.com Site : http://www.snosoft.com...

Multiple bugs in Caldera OpenServer utilities

Symlink problem on temporary files handling in sort and scoadmin...

Security Update: [CSSA-2002-SCO.22] OpenServer 5.0.5 OpenServer 5.0.6 : scoadmin command creates temporary files insecurely

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: OpenServer 5.0.5 OpenServer 5.0.6 : scoadmin command creates temporary files insecurely Advisory number: CSSA-2002-SCO.22 Issue date: 2002 May 28 Cross reference...