Vulnerabilities > SCO

DATE CVE VULNERABILITY TITLE RISK
2002-12-31 CVE-2002-1998 Remote Security vulnerability in SCO Open Unix and Unixware
Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21).
network
low complexity
sco
7.5
2002-12-11 CVE-2002-1323 Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.
local
low complexity
safe-pm sun sgi redhat sco
4.6
2002-10-28 CVE-2002-1199 Local File Disclosure vulnerability in ypxfrd
The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.
network
low complexity
caldera sco sun
5.0
2002-07-26 CVE-2002-0716 Unspecified vulnerability in SCO Openserver 5.0.5/5.0.6
Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name argument.
local
low complexity
sco
7.2
2001-12-31 CVE-2001-1579 Denial-Of-Service vulnerability in SCO Open Unix and Unixware
The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a denial of service.
network
low complexity
sco
5.0
2001-12-31 CVE-2001-1578 Local Security vulnerability in SCO Openserver 5.0.6
Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers and segment descriptors.
local
low complexity
sco
2.1
2001-12-31 CVE-2001-1508 Buffer Overflow vulnerability in SCO OpenServer lpstat
Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument.
local
low complexity
sco
4.6
2001-12-12 CVE-2001-0797 Buffer Overflow vulnerability in Multiple Vendor System V Derived 'login'
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
network
low complexity
sgi hp ibm sco sun
critical
10.0
2001-11-30 CVE-2001-0896 Denial-Of-Service vulnerability in SCO Openserver 5.0.5
Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g.
network
low complexity
sco
5.0
2001-08-22 CVE-2001-0627 Unspecified vulnerability in SCO Openserver
vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack.
local
high complexity
sco
3.7