EUVD-1999-0817

Malware in sbrugna...

SCO Unixware pkgadd directory traversal

It's possible to access any system files...

Unixware/Open Unix rcp DoS

rcp of /prog causes system to hang...

SCO UnixWare 7.1.X

Well.. Looks like a insecure file vuln exsists within the system created file when you do the initial install of SCO. Lets take a look here at /var/adm/isl/ifile [email protected] ls -l /var/adm/isl/ifile -rw-r--r-- 1 root root 4691 Sep 24 1999 /var/adm/isl/ifile And we all know the shadow file ...

Security Update: [CSSA-2001-SCO.14] Open Unix, UnixWare: uidadmin buffer overflow

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open Unix, UnixWare: uidadmin buffer overflow Advisory number: CSSA-2001-SCO.14 Issue date: 2001 August 23 Cross reference: 1. Problem...

[SRT2001-09] - vi and crontab -e /tmp issues

====================================================================== Strategic Reconnaissance Team Security AdvisorySRT2001-9 Topic: vi and crontab -e /tmp issues Vendor: Santa Cruz Operations Release Date: 05/07/01 ====================================================================== .:...

CVE-2000-0099

Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument...

unixware7.fundamental.txt

OVERVIEW A flaw in SCO UnixWare's security model will allow any user to gain root, read system files, etc. RANT I'm sure many of you are wondering what the response from the people from SCO has been regarding all of these UnixWare problems. Nil. First, a little background. Back when I began my...

unixware.auto.txt

Greetings, OVERVIEW Although UnixWare's /usr/X/bin/xauto is NOT suid/sgid, we can still overf= low a buffer within it and gain root privileges. BACKGROUND Only tested UnixWare 7.1, all other UnixWares should be assumed vulnerabl= e. DETAILS xauto is mode 755, root/sys and yet we can still use a...

CVE-1999-0864

UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file...

SCO Unixware 7.0 - 'xlock(1)' 'Username' Local Buffer Overflow

// source: https://www.securityfocus.com/bid/825/info Certain versions of Unixware ship with a version of xlock which is vulnerable to a buffer overflow attack. The xlock1 program locks the local X display until a username and password are entered. In this instance a user can provide an overly lo...

CVE-1999-1450

Vulnerability in 1 rlogin daemon rshd and 2 scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges...