CVE-2005-0351

CVE-2005-0351 affects SCO OpenServer 5.0.6 and 5.0.7; a buffer overflow in termsh, atcronsh, and auditsh triggered by a very long HOME environment variable could allow local users to execute arbitrary code. The SCO advisory SCOSA-2005.15 documents vulnerable binaries and the fix: upgrade to the f...

CVE-1999-0411

The vulnerability CVE-1999-0411 affects SCO OpenServer Enterprise System v5.0.4p, where startup scripts S84rpcinit, S95nis, S85tcp, and S89nfs are susceptible to a symlink attack that can let a local user gain root access. The root cause is a symlink-attack in the startup scripts, enabling privil...

CVE-2003-0742

CVE-2003-0742 affects SCO Internet Manager (mana). Local users can trigger menu.mana to run in the context of ncsa_httpd by exporting REMOTE_ADDR and then modify PATH to point to a malicious hostname program, enabling arbitrary program execution with root privileges on OpenServer 5.0.5–5.0.7. The...

CVE-1999-1571

CVE-1999-1571 describes a buffer overflow in the sar utility on SCO OpenServer 5.0.0–5.0.5 that may allow a local user to gain root privileges via a long -f parameter. The form of impact is local privilege escalation with complete confidentiality/integrity/availability impacts per the entry. The ...

CVE-2001-0577

CVE-2001-0577 concerns a local-privilege escalation in SCO OpenServer 5.0–5.0.6, where a buffer overflow in the first command-line argument can allow a local attacker to gain additional privileges. The affected software is SCO OpenServer 5.0 through 5.0.6; the underlying cause is a buffer overflo...

CVE-2005-0993

Summary: CVE-2005-0993 affects SCO OpenServer 5.0.6/5.0.7 where a buffer overflow in the nwprint utility can allow local code execution via a long command line argument. Affected components: nwprint and related binaries listed in the SCO advisory (nwprint, nwlpstat, nwcleand, nwcancel, nwlpadmin ...

CVE-1999-1253

The CVE-1999-1253 entry concerns a vulnerability in the kernel error handling routine of SCO OpenServer (versions 5.0.2 and earlier) and SCO Internet FastStart 1.0. This local issue can allow a user to gain root privileges due to improper handling in the kernel error path. The available documents...

CVE-2000-0158

CVE-2000-0158 describes a buffer overflow in the MMDF server that allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon. The affected component is the MMDF server’s SMTP handling; the root cause is a buffer overflow vulnerability. No exploitation details or re...

CVE-1999-0697

CVE-1999-0697 affects SCO Doctor. The provided documents describe a local privilege escalation where a local user can gain root privileges via a Tools option. The root cause and exact exploit path are not detailed in the sources; no remediation or patched version is specified in the supplied docu...

CVE-2003-0597

CVE-2003-0597 affects UnixWare 7.1.x (Merge before 5.3.23a). The description notes an unknown vulnerability in display that lets local users gain root privileges. The root cause is not detailed in the provided documents. CVSS2 base score is 7.2 (HIGH) with LOCAL access, no authentication, and ful...

CVE-2001-0579

SCO OpenServer 5.0.6 is affected by CVE-2001-0579 due to a buffer overflow in the first argument to lpadmin, enabling a local attacker to gain additional privileges. The connected sources confirm the flaw is in lpadmin and describe privilege escalation, but do not provide exploit code, affected v...

CVE-2001-0588

CVE-2001-0588 affects sendmail 8.9.3 included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6. A local attacker can gain additional privileges via a buffer overflow in the first argument to the command. The root cause is a buffer overflow in handling the first argument, leading to partial c...

CVE-1999-1185

The CVE-1999-1185 issue affects SCO mscreen and is caused by a buffer overflow in handling a long TERM entry in the .mscreenrc file, enabling local users to gain root privileges. The provided documents identify the vulnerable component and the impact (local privilege escalation) but do not includ...

CVE-2001-0578

The CVE-2001-0578 entry describes a buffer overflow in the lpforms utility on SCO OpenServer 5.0 through 5.0.6, enabling a local attacker to gain additional privileges via a long first argument to lpforms. Publicly documented impact is local privilege escalation with partial confidentiality/integ...

CVE-2004-1124

CVE-2004-1124 describes a local privilege/escape issue in SCO UnixWare 7.1.1–7.1.4 where the chroot jail can be broken, enabling local users to escape and perform unauthorized actions. The vulnerability affects specific binaries listed by SCO (e.g., /etc/conf/pack.d/namefs/Driver_atup.o, Driver_m...

CVE-1999-1209

CVE-1999-1209 describes a local privilege escalation in the “scoterm” component of SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0. The vulnerability allows local users to gain root privileges. The Initial Description does not provide concrete details on vulnerable files, exact root cause...

CVE-2001-0896

The CVE-2001-0896 entry concerns Inetd on OpenServer 5.0.5. A remote attacker can trigger a denial of service (crash) by issuing a port scan (e.g., with nmap -PO). The connected records (CVE and NVD entries) confirm the affected product and the crash-inducing behavior but do not provide concrete ...

CVE-2001-0575

The vulnerability CVE-2001-0575 affects SCO OpenServer 5.0.6 and is caused by a buffer overflow in the lpshut component. A local attacker can potentially gain additional privileges by supplying a long first argument to lpshut. The connected documents confirm the affected software and the root cau...

CVE-2002-0716

CVE-2002-0716 describes a format string vulnerability in the crontab component of SCO OpenServer 5.0.5 and 5.0.6 . The issue arises from format string specifiers in the file name argument , allowing local users to gain privileges . The vulnerability is tied to the crontab handling of a file name ...

CVE-2001-0587

The CVE-2001-0587 issue affects MMDF 2.43.3b on SCO OpenServer 5.0.6, where a buffer overflow in the first argument to the mail command allows a local attacker to gain additional privileges. Affected software: MMDF mail delivery program on SCO OpenServer 5.0.6. Root cause: buffer overflow in inpu...

CVE-2000-0306

CVE-2000-0306 describes a buffer overflow in SCO OpenServer’s calserver that allows remote attackers to gain root privileges by sending a long message. The vulnerability is caused by insufficient bounds checking in calserver; exploitation would require crafting a long message sent to the service....