Published: 02/12/1998 Updated: 07/11/2023

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sco unixware 7.1
sco unixware 7.1.1
sco unixware 7.0
sco unixware 7.0.1

source: wwwsecurityfocuscom/bid/842/info Certain versions of SCO Unixware ship with an exploitable version of the /usr/bin/uidadmin program The problem lies in that 'uidadmin' runs with root privileges and performs insecure writes to a scratch directory (/tmp/ in this instance) A malicious user may overwrite any existing file on the sys ...

NVD-CWE-Other ftp://ftp.sco.com/SSE/security_bulletins/SB-99.22a http://www.securityfocus.com/bid/842 http://www.securityfocus.com/templates/archive.pike?list=1&msg=19991202160111.20553.qmail%40nwcst282.netaddress.usa.net https://nvd.nist.gov https://www.exploit-db.com/exploits/19654/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-1999-0836

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect