CVE-2002-0677

The CVE-2002-0677 entry affects the CDE ToolTalk RPC database server (rpc.ttdbserverd). The OpenVAS/Core/CORE documentation confirms the vulnerability: an attacker can exploit improper range checking on the AUTH_UNIX file descriptor argument passed to _TT_ISCLOSE, using it as an index into a 128-...

CVE-2002-0678

CVE-2002-0678 relates to the CDE ToolTalk RPC database server (rpc.ttdbserverd). The OpenVAS/CERT CORE disclosures describe two vulnerabilities: (1) _TT_ISCLOSE range-check flaw permitting memory overwriting of the process when a local or remote client calls _TT_ISCLOSE; (2) _TT_TRANSACTION/log_f...

CVE-2001-1577

CVE-2001-1577 : Unknown vulnerability in the CDE component of Caldera OpenUnix 7.1.0, 7.1.1, and 8.0. An xterm session can gain privileges when the session is reused. The description notes no publicly provided exploit details or remediation in the available documents. No explicit root cause, affe...

CVE-2002-0679

CVE-2002-0679 concerns the CDE ToolTalk RPC database server, rpc.ttdbserverd, which contains a heap buffer overflow vulnerability triggered by an argument to the _TT_CREATE_FILE() procedure. A remote attacker could exploit this to execute arbitrary code or cause a denial of service, typically run...

CVE-2002-0884

CVE-2002-0884 describes multiple format string vulnerabilities in the ARP server component in.rarpd affecting Solaris, Caldera UnixWare and Open UNIX (and possibly other OSes). The flaw allows remote code execution via improper handling of format strings in the functions (1) syserr and (2) error....

CVE-2002-0987

The CVE-2002-0987 entry refers to X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 that fail to drop privileges before invoking programs (e.g., xkbcomp) via popen. This behavior could allow local users to gain privileges. The described vulnerability is a local privilege escalation due to inad...

CVE-2002-0988

CVE-2002-0988 describes a buffer overflow in the X server (Xsco) of OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities. The connected records reiterate the affected products and the vulnerability’s basic nature, but do not provide additional technical details, exploit...

CVE-2001-0858

CVE-2001-0858 describes a buffer overflow in pppattach and other linked PPP utilities on Caldera Open UNIX 8.0 and UnixWare 7.1.0/7.1.1. The root cause is an overflow in these PPP-related components, enabling local privilege escalation. Affected products and versions are explicitly listed in the ...

CVE-2002-0981

The CVE-2002-0981 issue affects UnixWare 7.1.1 and Open UNIX 8.0.0, where the ndcfg binary (/usr/lib/netcfg/bin/ndcfg) has a command‑line buffer overflow in its processing. The advisory notes that ndcfg gains privileges via the security subsystem (not setuid), enabling a local user to run code wi...

CVE-2001-1478

CVE-2001-1478 reports a buffer overflow in the xlock utility affecting UnixWare 7.1.0/7.1.1 and Open UNIX 8.0.0, enabling local users to execute arbitrary code. The description specifies a local attack requiring no user interaction beyond initiating the vulnerable xlock component; it does not pro...

CVE-2002-0517

The CVE-2002-0517 issue affects the X11 libX11 library in Caldera Open UNIX 8.0.0 and UnixWare 7.1.1 (and possibly other OSes). A buffer overflow occurs when handling a long -xrm argument in programs such as dtterm or xterm, allowing local users to gain root privileges. Exploitation details and a...

CVE-2002-0827

CVE-2002-0827 affects pppd on UnixWare 7.1.1 and Open UNIX 8.0.0, enabling local users to gain root privileges via (1) ppptalk or (2) ppp. The description notes this is a different issue from CVE-2002-0824. No remediation or version details are provided in the supplied documents; exploitation sta...

CVE-2002-0885

The CVE-2002-0885 entry describes multiple buffer overflows in in.rarpd (the ARP server) on Solaris and potentially other OSes (Caldera UnixWare, Open UNIX). The underlying issue is a vulnerability in functions (1) syserr and (2) error that could allow remote attackers to execute arbitrary code. ...

CVE-2002-1231

CVE-2002-1231 affects SCO UnixWare 7.1.1 and Open UNIX 8.0.0. A local user can trigger a denial of service by performing an rcp of /proc. Vulnerable binaries include /etc/conf/pack.d/fs/Driver_atup.o and Driver_mp.o. The advisory CSSA-2002-SCO.41 provides fixed packages: erg712112c.pkg.Z for Unix...

CVE-2001-1063

CVE-2001-1063 describes a local privilege-elevation in Caldera OpenUnix 8.0.0 and UnixWare 7 via a buffer overflow in the uidadmin utility. An overly long -S (scheme) command line argument can overflow a buffer, allowing a local user to gain root privileges. The vulnerability affects the uidadmin...

CVE-2002-0311

CVE-2002-0311 describes a vulnerability in WebTop on UnixWare 7.1.1 and Open UNIX 8.0.0 where local and possibly remote attackers can gain root privileges by supplying shell metacharacters in the -c argument of the CGI scripts scoadminreg.cgi or service_action.cgi. The affected components are the...

CVE-2001-1153

The vulnerability CVE-2001-1153 affects OpenUnix 8.0.0, specifically the lpsystem component. A local user can trigger a denial of service and potentially execute arbitrary code by supplying a long command line argument. The published score (CVSSv2) is 7.2 (HIGH) with local access, low attack comp...