7.2
CVSSv2

CVE-2001-0577

Published: 22/08/2001 Updated: 19/12/2017
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 725
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

recon in SCO OpenServer 5.0 up to and including 5.0.6 can allow a local malicious user to gain additional privileges via a buffer overflow attack in the first command line argument.

Vulnerable Product Search on Vulmon Subscribe to Product

sco openserver

Exploits

source: wwwsecurityfocuscom/bid/2560/info SCO OpenServer 506 (and possibly earlier versions) ships with a suid 'bin' executable called 'recon' 'recon' is used to buffer and forward escape sequences from a user's input to timing-sensitive applications 'recon' contains a locally exploitable buffer overflow condition present in the han ...