sco unixware 7.1.3 vulnerabilities and exploits

(subscribe to this query)

4.6

CVSSv2

The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow malicious users to hijack local sockets.

Sco Unixware 7.1.3 Sco Unixware 7.1.4 Sco Unixware 7.1.1

4.6

CVSSv2

Buffer overflow in uidadmin in SCO Unixware 7.1.3 and 7.1.4 allows local users to execute arbitrary code via a -S (scheme) argument that specifies a large file, a different vulnerability than CVE-2001-1063.

Sco Unixware 7.1.3 Sco Unixware 7.1.4

7.2

CVSSv2

Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecified vectors.

Sco Unixware 7.1.3 Sco Unixware 7.1.4

1 EDB exploit

7.2

CVSSv2

Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the (1) prompt or (2) defprompt command.

Sco Unixware 7.1.4 Sco Unixware 7.1.3

5

CVSSv2

The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote malicious users to cause a denial of service (memory exhaustion) via a series of requests, which causes inetd to launch a separate process for ea...

Sco Unixware 7.1.1 Sco Unixware 7.1.3 Sco Unixware 7.1.4 Sco Openserver 5.0.6 Sco Openserver 5.0.7

4.6

CVSSv2

Unknown vulnerability in chroot on SCO UnixWare 7.1.1 up to and including 7.1.4 allows local users to escape the chroot jail and conduct unauthorized activities.

Sco Openserver 5.0.7 Sco Unixware 7.1.1 Sco Unixware 7.1.3 Sco Unixware 7.1.4 Sco Openserver 5.0.6

7.2

CVSSv2

Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.

Sco Unixware 7.1.1 Sco Unixware 7.1.3 Sco Open Unix 8.0

2 EDB exploits

4.6

CVSSv2

SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PID) by obtaining a procfs file descriptor for the file and calling execve() on a setuid or setgid program, which leaves the descrip...

Sco Unixware 7.1.3 Sco Unixware 7.1.1 Sco Open Unix 8.0

2.1

CVSSv2

RPC portmapper (rpcbind) in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to cause a denial of service (lack of response) via multiple invalid portmap requests.

Sco Unixware 7.1.1 M5 Sco Unixware 7.1.3 Mp5 Sco Unixware 7.1.4 Mp2

2.1

CVSSv2

main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.

Cscope Cscope 15.3 Cscope Cscope 15.4 Cscope Cscope 15.5 Cscope Cscope 13.0 Cscope Cscope 15.1 Debian Debian Linux 3.0 Sco Unixware 7.1.1 Sco Unixware 7.1.3 Gentoo Linux Sco Unixware 7.1.4

2 EDB exploits

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook