Advisory: Tridia DoubleVision / SCO UnixWare

Security Advisory: SCO UnixWare 7 / Double Vision local root exploit By: Stephen J. Friedl, Software Consultant [email protected] Date: 2000-09-16 discovered late June 2000 Short Summary: The "Double Vision" product for SCO UnixWare has a buffer overflow vulnerabilty that allows any local user to...

Tridia DoubleVision 3.0 7.00 - Local Privilege Escalation

// source: https://www.securityfocus.com/bid/1697/info A utility integral to Tridia DoubleVision for SCO UnixWare 7.x has been found to be vulnerable to a buffer overflow attack. dvtermtype, which is setuid root, is run by a user at login time to tell DoubleVision what terminal translations to us...

Linux news 16.06.00

SCO планирует выпускать свой собственный дистрибутив Linux. По-моему сейчас не делает свои дистрибутивы Linux только ленивый. Лучше бы был один, но отличный. Подробнее: http://slashdot.org/articles/00/06/13/127228.shtml Интервью с Аланом Коксом На LinuxJournal выложено интервью с одним из главных...

CVE-1999-0979

The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into init before the privileged process is executed...

CVE-2000-0224

The CVE-2000-0224 entry refers to ARCserve agent on SCO UnixWare 7.x. The vulnerability is a local privilege escalation via a symlink attack that could allow a local attacker to obtain root privileges. The description clearly states the affected product/component and the root cause (symlink-relat...

CVE-2000-0224

ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack...

CVE-2000-0215

Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges...

CVE-2000-0215

CVE-2000-0215 : Vulnerability in the SCO cu program on UnixWare 7.x allows local users to gain privileges (CVSS v2 base score 7.2; impact: confidentiality, integrity, and availability). The available sources describe a local privilege escalation but do not specify the root cause, vulnerable compo...

CVE-2000-0224: Undefined Security Weakness

ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack...

CVE-2000-0173

Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service...

CVE-1999-0893

userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack...

CVE-1999-0893

CVE-1999-0893 relates to SCO OpenServer and involves the userOsa component. The connected PT-1999-1441 entry describes a local vulnerability where an attacker can exploit a symlink race to corrupt files via userOsa. It notes that affected SCO OpenServer versions are not specified and provides no ...

CVE-2000-0173: Undefined Security Weakness

Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service...

CVE-1999-0893: Undefined Security Weakness

userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack...

CVE-2000-0173

Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service...

CVE-2000-0147

The CVE-2000-0147 issue affects snmpd on SCO OpenServer, where the SNMP community string is writable by default. This enables local attackers to modify the host’s configuration. Connected sources corroborate the default-write vulnerability but do not provide a patch or explicit remediation details.

CVE-2000-0147

snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration...

CVE-2000-0147: Undefined Security Weakness

snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration...

CVE-2000-0224

ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack...

SCO Unixware 7.17.1.1 - ARCserver tmp Symlink

SCO Unixware 7.17.1.1 - ARCserver tmp Symlink source: https://www.securityfocus.com/bid/988/info A symlink following vulnerability exists in the ARCserve agent, as shipped with SCO Unixware 7. Upon startup, the asagent program will create several files in /tmp. These are created mode 777, and can...