Vulnerabilities > SCO > Openserver > Critical

DATE CVE VULNERABILITY TITLE RISK
2005-12-31 CVE-2005-3625 Resource Management Errors vulnerability in multiple products
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."
10.0
2003-10-07 CVE-2003-0791 Deserialization of Untrusted Data vulnerability in multiple products
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.
network
low complexity
mozilla sco CWE-502
critical
9.8
2001-12-12 CVE-2001-0797 Buffer Overflow vulnerability in Multiple Vendor System V Derived 'login'
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
network
low complexity
sgi hp ibm sco sun
critical
10.0
1999-11-10 CVE-1999-0835 Denial of service in BIND named via malformed SIG records.
network
low complexity
ibm sco sun
critical
10.0
1999-02-09 CVE-1999-0368 Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. 10.0
1998-12-04 CVE-1999-0798 Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.
network
low complexity
bsdi freebsd openbsd redhat sco
critical
10.0
1998-04-08 CVE-1999-0011 Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
network
low complexity
data-general isc ibm nec netbsd redhat sco sun
critical
10.0
1993-09-17 CVE-1999-1138 Unspecified vulnerability in SCO products
SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.
network
low complexity
sco
critical
10.0