2.1
CVSSv2

CVE-1999-0893

Published: 11/10/1999 Updated: 17/08/2022
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 215
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.

Vulnerable Product Search on Vulmon Subscribe to Product

sco openserver 5.0

Exploits

source: wwwsecurityfocuscom/bid/701/info Under certain versions of SCO OpenServer there exists a symlink vulnerability which can be exploited to overwrite any file which is group writable by the 'auth' group The problem in particular is in the the /etc/sysadmd/bin/userOsa executable When given garbage output the program will write out ...