688 matches found
SCO Open Server <= 5.0.5 'userOsa' symlink Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/701/info Under certain versions of SCO OpenServer there exists a symlink vulnerability which can be exploited to overwrite any file which is group writable by the 'auth' group. The problem in particular is in the the...
SCO OpenServer 5.0.6/5.0.7 NWPrint Command Line Argument Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12986/info nwprint that is distributed with SCO OpenServer is prone to a local buffer overflow vulnerability. This issue arises because the application fails to perform boundary checks prior to copying user-supplied data...
SCO OpenServer 5.0.x 'mana' PATH_INFO Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8618/info It has been reported that SCO OpenServer Inertnet Manager 'mana' process is prone to a privilege escalation issue allow local users to execute arbitrary code with elevated privileges. mana normally requires...
SCO Multi-channel Memorandum Distribution Facility Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/10758/info It has been reported that the SCO Multi-channel Memorandum Distribution Facility MMDF is affected by multiple vulnerabilities. These issues are due to a failure of the utility to properly validate buffer...
Windows 3.11/95/NT 4.0/NT 3.5.1 "Out Of Band" Data Denial of Service (3)
No description provided by source. source: http://www.securityfocus.com/bid/2010/info Older versions of Microsoft Windows 95, Windows for Workgroups 3.11, Windows NT up to and including 4.0, as well as SCO Open Server 5.0, have a vulnerability relating to the way they handle TCP/IP Out of Band...
SCO UnixWare < 7.1.4 p534589 (pkgadd) Local Root Exploit
No description provided by source. !/bin/ksh 04/2008: public release SCO UnixWare 7.1.4 p534589 if id -un = 'root' ; then grep -v $1-root$ /var/adm/sulog su.log cp su.def /etc/default/su cp su.log /var/adm/sulog rm -f su.def su.log woot.log else echo ------------------------------------ echo...
SCO Open Server 5.0.6 recon Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2560/info SCO OpenServer 5.0.6 and possibly earlier versions ships with a suid 'bin' executable called 'recon'. 'recon' is used to buffer and forward escape sequences from a user's input to timing-sensitive applications...
SCO OpenServer 5.0.x StartX Weak XHost Permissions Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2731/info OpenServer is a Unix based operating system distributed by Santa Cruz Operations. A problem in access control of the X server could allow a local user to gain elevated privileges. When the X Window System is...
SCO Open Server 5.0.6 lpforms Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2554/info SCO OpenServer 5.0.6 and possibly earlier versions ships with several suid bin executables used in printer administration and related tasks. This includes lpforms, a component used to manage and configure print...
SCO Open Server 5.0.6 lpshut Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2555/info SCO OpenServer 5.0.6 and possibly earlier versions ships with several suid bin executables used in printer administration and related tasks. This includes lpshut, a component used to shut down the LP print...
SCO Open Server 5.0.5 cancel Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/702/info There is a buffer overflow vulnerability in /opt/K/SCO/Unix/5.0.5Eb/.softmgmt/var/usr/bin/cancel. It is important to know that the overflows are not in /usr/bin/cancel or /usr/lpd/remote/cancel. The consequence o...
SCO Open Server <= 5.0.5 XBase Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/479/info The XBase package that ships with SCO OpenServer 5.0. is vulnerable to several buffer overflow attacks in many different XBase tools. The tools that are installed setuid root allow local users to gain superuser...
SCO OpenServer 5.0.6 lpadmin Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2553/info SCO OpenServer 5.0.6 and possibly earlier versions ships with several suid 'bin' executables used in printer administration and related tasks. This includes lpadmin, a component used to manage and configure prin...
SCO Open Server 5.0.5 X Library Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/638/info A buffer overflow vulnerability in the shared X library may allows local users to obtain higher privileges. Any setuid applications linked against the library are possibly vulnerable. The vulnerability is in the...
Tridia DoubleVision 3.0 7.00 Local Root Compromise
No description provided by source. source: http://www.securityfocus.com/bid/1697/info A utility integral to Tridia DoubleVision for SCO UnixWare 7.x has been found to be vulnerable to a buffer overflow attack. dvtermtype, which is setuid root, is run by a user at login time to tell DoubleVision...
SCO Unixware 7.0/7.0.1/7.1/7.1.1 'xauto' Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/848/info Certain versions of SCO's UnixWare ship with a version of /usr/X/bin/xauto which is vulnerable to a buffer overflow attack which may result in an attacker gaining root privileges. This is exploitable to gain root...
SCO Unixware 7.1 '/var/mail' permissions Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/849/info Certain versions of SCO's UnixWare only 7.1 was tested ship with the /var/mail/ directory with permission 777-rwxrwxrwx . This in effect allows malicious users to read incoming mail for users who do not yet have ...
SCO Open Server 5.0.6 lpusers Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2557/info SCO OpenServer 5.0.6 and possibly earlier versions ships with several suid bin executables used in printer administration and related tasks. This includes lpusers, a component used to set the queue priority of...
SCO Open Server 5.0.5 X Library Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/638/info A buffer overflow vulnerability in the shared X library may allows local users to obtain higher privileges. Any setuid applications linked against the library are possibly vulnerable. The vulnerability is in the...
SCO UNIX 5 calserver Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2353/info Versions of SCO Unix calserver are vulnerable to a buffer overflow attack which can permit root access to a remote attacker. / include stdio.h include fcntl.h include netdb.h include sys/types.h include...