CVE-2002-0716

Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name argument...

SCO Openserver Xsco heap overflow.

====================================================================== Strategic Reconnaissance Team Security Advisory SRT2002-06-11-1037 Topic : SCO OpenServer Xsco heap overflow Date : June 11, 2002 Credit : KF dotslashatsnosoft.com Site : http://www.snosoft.com...

SRT Security Advisory (SRT2002-06-04-1711): SCO crontab

====================================================================== Strategic Reconnaissance Team Security Advisory SRT2002-06-04-1611 Topic : SCO OpenServer crontab format string vulnerability Date : June 04, 2002 Credit : KF dotslashatsnosoft.com Site : http://www.snosoft.com...

CVE-2001-1148

Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to 1 atcronsh, 2 auditsh, 3 authsh, 4 backupsh, 5 lpsh, 6 sysadm.menu, or 7 termsh...

CVE-2001-1148

CVE-2001-1148: Multiple buffer overflows in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (atcronsh, auditsh, authsh, backupsh, lpsh, sysadm.menu, or termsh); affected software is SCO OpenServer components used by scoadmin/sysadmsh....

CVE-2001-0627

vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack...

CVE-1999-1162

Technical details about CVE-1999-1162 are not publicly provided in the supplied documents. Monitor for updates.

CVE-1999-1162

Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system...

CVE-1999-1138

The CVE affects SCO UNIX System V/386 Release 3.2 and other SCO products. Its description states that home directories are created under /tmp (dos user) and /usr/tmp (asg user), which are world-writable, enabling other users to access those accounts. The underlying issue is the use of world-writa...

CVE-2001-0627

The CVE cites SCO OpenServer’s vi (5.0.0–5.0.6) as vulnerable: it creates insecure, world-writable temporary files in /tmp with predictable names, allowing a local attacker to exploit a symlink to overwrite arbitrary files writable by the user. The impact is file integrity loss for targeted files...

CVE-1999-1209

CVE-1999-1209 describes a local privilege escalation in the “scoterm” component of SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0. The vulnerability allows local users to gain root privileges. The Initial Description does not provide concrete details on vulnerable files, exact root cause...

CVE-1999-1138

SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories 1 /tmp for the dos user, and 2 /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable...

CVE-1999-1209

Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges...

Censoft TERM Emu bOf

Vendor: www.censoft.com Product: TERM for UNIX / Linux Emulations Wyse 60, SCO ANSI, VT220 Terminal Supports SCO, AIX, HP, DEC, Solaris Operating Environmenttm software, and Linuxtm I WAS going to purchase this product after trying the eval however I changed my mind for some reason...I would...

SCO UnixWare 7.1.X

Well.. Looks like a insecure file vuln exsists within the system created file when you do the initial install of SCO. Lets take a look here at /var/adm/isl/ifile [email protected] ls -l /var/adm/isl/ifile -rw-r--r-- 1 root root 4691 Sep 24 1999 /var/adm/isl/ifile And we all know the shadow file ...

CVE-2001-1578

Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers and segment descriptors...

CVE-2001-1508

Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument...

Многочисленные дырки в дистрибутиве SCO 5.0.6

В дистрибутив вошли старые версии различных продуктов имеющие удаленны и локальные уязвимости...

Переполнения буфера в setcontext и sysi86 под SCO OpenServer (buffer overflow)

No description provided...

SCO skunkware top format strings issue

This is a known issue with other vendors... top format strings issue. SCO never "supported" skunkware it was out of courtesy that the binarys were provided as I was once told. I assume Caldera takes the same position. [email protected] ls -al /usr/local/bin/top lrwxrwxrwx 1 root s...