Многочисленные переполнения буфера в утилитах администрирования SCO

Переполнения буфера в atcronsh, auditsh, authsh, backupsh, lpsh, sysadm.menu, termsh...

SCO OpenServer/UnixWare vi creates temporary files insecurely

Overview The implementation of vi, a text editor, provided with SCO Openunix creates insecure temporary files with predictable names. Using a symbolic link attack, an intruder can overwrite any file writable by the user of vi. Description vi is a screen-oriented text editor. The implementation...

CVE-1999-1253

Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to gain root privileges...

CVE-1999-1450

Technical details about CVE-1999-1450 are not publicly available in the provided documents. Monitor for updates.

CVE-1999-1302

Unspecified vulnerability in ptchmod in SCO UNIX 4.2 and earlier allows local users to gain root access...

CVE-1999-1302

Technical details (affected software, root cause, impact, remediation) are not provided in the supplied documents. Monitor for updates.

CVE-1999-1305

Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access...

CVE-1999-1303

CVE-1999-1303 affects SCO UNIX 4.2 and earlier, with the prwarn component enabling local users to gain root privileges. The connected sources confirm the vulnerability and impact (local, high severity, CVSSv2 7.2), but do not provide additional details on affected binary versions beyond the SCO U...

CVE-1999-1304

Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access...

CVE-1999-1252

Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges...

CVE-1999-1041

CVE-1999-1041 is a local privilege escalation affecting SCO OpenServer 5.0 and SCO UNIX 3.2v4 through a buffer overflow in the mscreen program. The vulnerability can be triggered by processing an excessively long TERM environment variable and by an overly long entry in the .mscreenrc file, enabli...

CVE-1999-1185

The CVE-1999-1185 issue affects SCO mscreen and is caused by a buffer overflow in handling a long TERM entry in the .mscreenrc file, enabling local users to gain root privileges. The provided documents identify the vulnerable component and the impact (local privilege escalation) but do not includ...

CVE-1999-1253

The CVE-1999-1253 entry concerns a vulnerability in the kernel error handling routine of SCO OpenServer (versions 5.0.2 and earlier) and SCO Internet FastStart 1.0. This local issue can allow a user to gain root privileges due to improper handling in the kernel error path. The available documents...

CVE-1999-1450

Vulnerability in 1 rlogin daemon rshd and 2 scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges...

CVE-1999-1041

Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via 1 a long TERM environmental variable and 2 a long entry in the .mscreenrc file...

CVE-1999-1303

Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access...

CVE-1999-1252

Technical details about CVE-1999-1252 are not publicly provided in the connected documents. Monitor for updates.

CVE-1999-1304

The CVE-1999-1304 entry concerns SCO UNIX 4.2 and earlier, where a login vulnerability allows local users to gain root access. The available documents reiterate a local privilege escalation through the login process, with no explicit exploit details, affected component unknown beyond the login me...

CVE-1999-1185

Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry TERM in the .mscreenrc file...

CVE-1999-1305

Technical details about CVE-1999-1305 are not publicly available in the supplied documents. No explicit affected product versions, root cause, or mitigation are provided. Monitor for updates.