173 matches found
[Full-disclosure] iDEFENSE Security Advisory 10.24.05: SCO Openserver authsh 'Home' Buffer Overflow Vulnerability
SCO Openserver authsh 'Home' Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.24.05 http://www.idefense.com/application/poi/display?type=vulnerabilities October 24, 2005 I. BACKGROUND SCO OpenServer is a UNIX-like operating system for x86 platforms. II. DESCRIPTION Local exploitation o...
CVE-2001-1578
CVE-2001-1578 affects SCO OpenServer 5.0.6 and earlier. The vulnerability allows a local attacker to modify critical information, including certain CPU registers and segment descriptors. The available documents do not specify a patch or remediation; no exploit details are provided. Implementation...
CVE-2001-1578
Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers and segment descriptors...
CVE-2001-1508
Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument...
CVE-2001-1508
CVE-2001-1508 : A buffer overflow in the lpstat utility on SCO OpenServer 5.0–5.0.6a allows local users to run arbitrary code as group bin through a long command line argument. The documents specify a local exploit path but do not provide explicit exploited details or patch information. The vulne...
CVE-2001-1508
Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument...
SCO OpenServer Unix utilities format string bugs
Format string vulnerabilities in different utilities including sgid lp /usr/lib/nucrt/bin/nwprint...
CVE-2005-0993
Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line argument...
CVE-2004-0390
SCO OpenServer 5.0.5–5.0.7 exposes an authentication gap: it supports Xauthority style access control only when logging in via scologin, which can allow an unauthorized user to gain access to an X session through other X login methods. The vulnerability is described in CVE-2004-0390 and has a hig...
CVE-2005-0351
Buffer overflow in 1 termsh, 2 atcronsh, and 3 auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary code via a long HOME environment variable...
CVE-2005-0351
CVE-2005-0351 affects SCO OpenServer 5.0.6 and 5.0.7; a buffer overflow in termsh, atcronsh, and auditsh triggered by a very long HOME environment variable could allow local users to execute arbitrary code. The SCO advisory SCOSA-2005.15 documents vulnerable binaries and the fix: upgrade to the f...
CVE-2005-0993
Summary: CVE-2005-0993 affects SCO OpenServer 5.0.6/5.0.7 where a buffer overflow in the nwprint utility can allow local code execution via a long command line argument. Affected components: nwprint and related binaries listed in the SCO advisory (nwprint, nwlpstat, nwcleand, nwcancel, nwlpadmin ...
CVE-2005-0351
Buffer overflow in 1 termsh, 2 atcronsh, and 3 auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary code via a long HOME environment variable...
possible privilege escalation on Sco OpenServer 5.0.7
i started to play with a vanilla installation of SCO OpenServer 5.0.7 to check the portability of some code a few days ago, and noticed that some binary files were segfaulting if given an arbitrary long input; btw i don't think it's really a problem because most of them were not setuid/setgid, an...
SCO OpenServer 5.0.65.0.7 - NWPrint Command Line Argument Local Buffer Overflow
SCO OpenServer 5.0.65.0.7 - NWPrint Command Line Argument Local Buffer Overflow // source: https://www.securityfocus.com/bid/12986/info nwprint that is distributed with SCO OpenServer is prone to a local buffer overflow vulnerability. This issue arises because the application fails to perform...
SCO OpenServer 5.0.6/5.0.7 - NWPrint Command Line Argument Local Buffer Overflow
// source: https://www.securityfocus.com/bid/12986/info nwprint that is distributed with SCO OpenServer is prone to a local buffer overflow vulnerability. This issue arises because the application fails to perform boundary checks prior to copying user-supplied data into sensitive process buffers....
SCO OpenServer vulnerable to privilege escalation in 'scosession' argument handling
Overview A vulnerability in a program supplied with the SCO OpenServer operating system may allow local attackers to gain elevated privileges. Description SCO OpenServer is a UNIX-like operating system for Intel and AMD platforms. The 'scosession' session handling component, which is responsible...
CVE-2004-1131
CVE-2004-1131 affects SCO OpenServer 5.0.6 and 5.0.7. The vulnerability involves multiple buffer overflows in the enable command, allowing local users to execute arbitrary code via long command line arguments. These details come from the description of the CVE entry and are corroborated by associ...