[Full-disclosure] iDEFENSE Security Advisory 10.24.05: SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability

SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.24.05 http://www.idefense.com/application/poi/display?type=vulnerabilities October 24, 2005 I. BACKGROUND SCO OpenServer is a UNIX-like operating system for x86 platforms. II. DESCRIPTION Local exploitation...

SCO OpenServer authsh / backupsh buffer overflow

Buffer overflow in /usr/lib/sysadm/authsh, /usr/lib/sysadm/backupsh allow to gain egid backup...

[Full-disclosure] OpenServer 5.0.7 : authsh and backupsh buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: OpenServer 5.0.7 : authsh and backupsh buffer overflow Advisory number: SCOSA-2005.40 Issue date: 2005 October 20 Cross reference: sr894990 fz532992 erg712939 sr894993 fz532995 erg712941 CAN-2005-2926 1. Problem...

CVE-2001-1578

Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers and segment descriptors...

CVE-2001-1578

CVE-2001-1578 affects SCO OpenServer 5.0.6 and earlier. The vulnerability allows a local attacker to modify critical information, including certain CPU registers and segment descriptors. The available documents do not specify a patch or remediation; no exploit details are provided. Implementation...

CVE-2005-2132

This CVE (CAN-2005-2132) affects SCO UnixWare 7.x (e.g., 7.1.1 m5, 7.1.3 mp5, 7.1.4 mp2) where the RPC portmapper (rpcbind) can be forced into a denial-of-service state by multiple invalid portmap requests, causing RPC services to fail to respond. OpenServer-related advisories (SCOSA-2005.43 for ...

CVE-2005-2132

RPC portmapper rpcbind in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to cause a denial of service lack of response via multiple invalid portmap requests...

[NILESA-20050701] UnixWare 7.x RPC portmapper Dos Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================================ NileSOFT Security Advisory - -------------------------------------------------------------------------------- ID : NILESA-20050701 Title : rpcbind Invalid portmap Request...

CVE-2002-1998

Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtablecreate procedure 21...

CVE-2001-1508

Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument...

CVE-2001-1508

CVE-2001-1508 : A buffer overflow in the lpstat utility on SCO OpenServer 5.0–5.0.6a allows local users to run arbitrary code as group bin through a long command line argument. The documents specify a local exploit path but do not provide explicit exploited details or patch information. The vulne...

CVE-2002-1998

CVE-2002-1998 describes a buffer overflow in rpc.cmsd on SCO UnixWare 7.1.1 and Open UNIX 8.0.0 that allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21). Multiple sources (NVD, Red Hat advisory, CVE records) corroborate this description and t...

CVE-2001-1508

Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument...

SCO OpenServer Unix utilities format string bugs

Format string vulnerabilities in different utilities including sgid lp /usr/lib/nucrt/bin/nwprint...

CVE-2005-0134

Technical details about CVE-2005-0134 are not publicly available in the provided connected documents. No affected versions, root cause, impact, or mitigations are disclosed here. Monitor for updates.

CVE-2005-0134

The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets...

CVE-2005-0134

The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets...

CVE-2005-0993

Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line argument...

CVE-2004-0390

SCO OpenServer 5.0.5–5.0.7 exposes an authentication gap: it supports Xauthority style access control only when logging in via scologin, which can allow an unauthorized user to gain access to an X session through other X login methods. The vulnerability is described in CVE-2004-0390 and has a hig...

CVE-2005-0351

CVE-2005-0351 affects SCO OpenServer 5.0.6 and 5.0.7; a buffer overflow in termsh, atcronsh, and auditsh triggered by a very long HOME environment variable could allow local users to execute arbitrary code. The SCO advisory SCOSA-2005.15 documents vulnerable binaries and the fix: upgrade to the f...