Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 04/10/2002 Updated: 18/10/2016

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 215

Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files.

Vulnerable Product	Search on Vulmon	Subscribe to Product
caldera openserver 5.0.5
caldera openserver 5.0.6

source: wwwsecurityfocuscom/bid/4875/info A vulnerability has been reported in the scoadmin utility that may allow a local attacker to overwrite any file The vulnerability is due to the predictable naming of temporary files used by scoadmin When writing to temporary files, there are no checks to ensure that it does not already exist Sy ...

NVD-CWE-Other http://www.securityfocus.com/bid/4875 http://www.iss.net/security_center/static/9210.php ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.22/CSSA-2002-SCO.22.txt http://marc.info/?l=bugtraq&m=99057164129869&w=2 https://nvd.nist.gov https://www.exploit-db.com/exploits/21489/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-0887

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect