CVE-2005-3903

CVE-2005-3903 documents a local privilege escalation in SCO Unixware 7.1.3 and 7.1.4 caused by a buffer overflow in the setuid binary uidadmin when processing a long -S (scheme) argument that specifies a large file. The vulnerability arises from a failure to bound the input length, enabling a loc...

CVE-2005-3903

Buffer overflow in uidadmin in SCO Unixware 7.1.3 and 7.1.4 allows local users to execute arbitrary code via a -S scheme argument that specifies a large file, a different vulnerability than CVE-2001-1063...

SCO uidadmin buffer overflow

Buffer overflow on parsing -S command line parameter...

sco/x86 execve("/bin/sh", ..., NULL); 43 bytes

Exploit for sco/x86 platform in category shellcode ============================================== sco/x86 execve"/bin/sh", ..., NULL; 43 bytes ============================================== / minervini at neuralnoise dot com c 2005 SCOSV scosysv 3.2 5.0.7 i386, execve"/bin/sh", ..., NULL; / inclu...

SCO OpenServer RPC protocol DoS

RPC service hangs on invalid RPC BIND request...

CVE-2005-2926

Stack-based buffer overflow in 1 backupsh and 2 authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long HOME environment variable...

CVE-2005-2927

Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the 1 prompt or 2 defprompt command...

CVE-2005-2927

CVE-2005-2927: Local buffer overflow in SCO UnixWare 7.1.3/7.1.4 (ppp prompt/defprompt) allows local users to run arbitrary code due to an unchecked long argument to the ppp binary (ppptalk) where the binary is setuid root. Vulnerable binaries include /usr/bin/ppptalk; impact is root privilege es...

CVE-2005-2926

Stack-based buffer overflow in 1 backupsh and 2 authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long HOME environment variable...

CVE-2005-2926

CVE-2005-2926 affects SCO OpenServer 5.0.7: stack-based buffer overflow in backupsh and authsh triggered by a crafted HOME environment variable. Local attackers can execute arbitrary code with group backup or auth privileges (authsh could gain root). OpenServer 5.0.7 binaries backupsh/authsh are ...

[Full-disclosure] iDEFENSE Security Advisory 10.24.05: SCO Openserver authsh 'Home' Buffer Overflow Vulnerability

SCO Openserver authsh 'Home' Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.24.05 http://www.idefense.com/application/poi/display?type=vulnerabilities October 24, 2005 I. BACKGROUND SCO OpenServer is a UNIX-like operating system for x86 platforms. II. DESCRIPTION Local exploitation o...

SCO Unixware ppp buffer overflow

Buffer overflow in /usr/bin/ppptalk...

SCO OpenServer authsh / backupsh buffer overflow

Buffer overflow in /usr/lib/sysadm/authsh, /usr/lib/sysadm/backupsh allow to gain egid backup...

[Full-disclosure] iDEFENSE Security Advisory 10.24.05: SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability

SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.24.05 http://www.idefense.com/application/poi/display?type=vulnerabilities October 24, 2005 I. BACKGROUND SCO OpenServer is a UNIX-like operating system for x86 platforms. II. DESCRIPTION Local exploitation...

[Full-disclosure] OpenServer 5.0.7 : authsh and backupsh buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: OpenServer 5.0.7 : authsh and backupsh buffer overflow Advisory number: SCOSA-2005.40 Issue date: 2005 October 20 Cross reference: sr894990 fz532992 erg712939 sr894993 fz532995 erg712941 CAN-2005-2926 1. Problem...

CVE-2001-1578

Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers and segment descriptors...

CVE-2001-1578

CVE-2001-1578 affects SCO OpenServer 5.0.6 and earlier. The vulnerability allows a local attacker to modify critical information, including certain CPU registers and segment descriptors. The available documents do not specify a patch or remediation; no exploit details are provided. Implementation...

CVE-2005-2132

This CVE (CAN-2005-2132) affects SCO UnixWare 7.x (e.g., 7.1.1 m5, 7.1.3 mp5, 7.1.4 mp2) where the RPC portmapper (rpcbind) can be forced into a denial-of-service state by multiple invalid portmap requests, causing RPC services to fail to respond. OpenServer-related advisories (SCOSA-2005.43 for ...

CVE-2005-2132

RPC portmapper rpcbind in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to cause a denial of service lack of response via multiple invalid portmap requests...

[NILESA-20050701] UnixWare 7.x RPC portmapper Dos Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================================ NileSOFT Security Advisory - -------------------------------------------------------------------------------- ID : NILESA-20050701 Title : rpcbind Invalid portmap Request...